- Integrate security best practices into the software development life cycle (SDLC) and ensure security is embedded from design to deployment.
- Utilize Microfocus Fortify and other SAST tools to analyze source code for vulnerabilities.
- Work closely with development teams to remediate identified security issues.
- Implement and manage Black Duck SCA tools from Synopsys to identify and manage open-source component risks.
- Provide guidance on secure usage of third-party libraries and components.
- Conduct security assessments using Microfocus WebInspect and other DAST tools.
- Collaborate with development teams to address and remediate dynamic security findings.
- Implement and manage container security tools, with a focus on Anchore, to ensure secure container deployments.
- Provide recommendations for secure container orchestration.
- Work on ensuring systems and applications comply with Security Technical Implementation Guide.
- Bachelor's degree in computer science, Information Security, or related field and 3+ years of prior experience in application security with a focus on SAST, SCA, DAST or Master's with 1-2 years of prior experience in application security with a focus on SAST, SCA, DAST.
- Experience in system integrations testing through a full system development life cycle, including implementing test plans, test cases and test processes.
- Strong experience with Microfocus Fortify, Black Duck, Microfocus WebInspect, Anchore, or similar products.
- Knowledge of secure coding practices and integration into SDLC.
- Familiarity with common security frameworks and standards.
- Strong programming/scripting skills.
- Excellent communication and collaboration skills.
- Working in an Agile project management environment.
- Enthusiastic with the ability to work well on a team and a self-starter who can work on their own.
- Knowledge of Atlassian software such as JIRA, JIRA Service Desk, and Confluence.
- Experience with data engineering tools such as Kubernetes/Rancher, Cloudera.
- Experience with Configuration Management and IaC tools such as Salt or Ansible.
- Experience with scripting languages, CI/CD tools, Elasticsearch, or Gitlab.
- Experience working in an air-gapped environments.
- Experience working in large computing environments (> 1,000 end-points).
- Above market fixed salary or hourly pay.
- Up to $10,000 bonus for each referral.
- Additional bonuses for exceptional performance, assisting with business development and company growth.
- 100% paid premiums for health insurance. Choose from over 80 gold-level medical plans from Aetna, CareFirst, Kaiser and UnitedHealthcare. Choose from PPO, EPO, POS, HMO, and HSA-compatible.
- HSA and FSA options.
- 100% paid premiums for dental insurance.
- 100% paid premiums for vision insurance.
- 100% paid premiums for short-term disability.
- 100% paid premiums for long-term disability.
- 100% paid premiums for accidental death & dismemberment.
- 100% paid premiums for life insurance with a $200,000 max benefit.
- 8% company contribution to 401k with immediate vesting.
- 401k pre-tax and Roth options.
- Up to 20 days of flexible paid time off (PTO).
- 11 days of paid floating holidays.
- Flexible work schedules including flex time and compressed work period.
- Remote work including partial or fully remote (contract and project-dependent).
-
Cloud Security Engineer
19 hours ago
Compass Pointe Consulting Bethesda, United StatesCloud Security Engineer · Bethesda, MD – Hybrid 2/3 days in office · Responsibilities encompass collaborating with other DevOps and SysOps teams to transition public facing, on-premises applications to the cloud; securing the configuration management of the cloud infrastructure; ...
-
Security Engineer
9 hours ago
Omm IT Solutions Washington, United StatesThis is a 100% Onsite Role. · About the Position: · The Security Operations Engineer shall be responsible for implementing new firewall architectures, upgrades and features as necessary and assisting in the administration of all information security firewalls to include updates, ...
-
Security Engineer
19 hours ago
Omm IT Solutions Washington, United StatesThis is a 100% Onsite Role. · About the Position: · The Security Operations Engineer shall be responsible for implementing new firewall architectures, upgrades and features as necessary and assisting in the administration of all information security firewalls to include updates, ...
-
Senior Security Engineer
3 weeks ago
3M Consultancy washington, United StatesThis is a remote position. · Job Title: Senior Security Engineer. · Location: Washington, DC (Remote) · Duration: Full-Time. · Role Specific Duties: · Provide network IDS monitoring, cyber threat intelligence, security log analysis and forensics, and web application security ...
-
Security Engineer
3 weeks ago
ARK Solutions, Inc. Bethesda, United StatesJob: Security Engineer · Location:Bethesda, MD/Remote · Duration: Long Term · This is Remote position, but candidate has to go onsite time to time. · Only looking for local candidate. · Only Open for W2 · JOB DESCRIPTION · Supports the Identity & Access Management (IAM) functio ...
-
Security Engineer
2 weeks ago
ARK Solutions Inc Bethesda, United StatesJob: Security Engineer (Ping Federate) · Location: Bethesda, MD/Remote · Duration: Long Term · JOB DESCRIPTION · Supports the Identity & Access Management (IAM) function in Global Information Security organization. Ideal candidate will bring subject matter expertise (L3) on Web ...
-
Security Engineer
2 weeks ago
Ark Solutions Bethesda, United StatesJob: Security Engineer · Location: · Bethesda, MD/Remote · Duration: Long Term · This is Remote position, but candidate has to go onsite time to time. · Only looking for local candidate. · Only Open for W2 · JOB DESCRIPTION · Supports the Identity & Access Management (IAM) fun ...
-
Security Engineer
2 weeks ago
Diverse Systems Group Bethesda, United StatesJob Description · Job Description · As a \ Security Engineer, you will be a key leader in maintaining the security posture of our systems and ensuring compliance with the Department of Defense (DOD) and Defense Health Agency (DHA) policies and requirements. Your extensive exper ...
-
Security Engineer
3 weeks ago
Diverse Systems Group Bethesda, United StatesJob Description · Job DescriptionAs a \ Security Engineer, you will be a key leader in maintaining the security posture of our systems and ensuring compliance with the Department of Defense (DOD) and Defense Health Agency (DHA) policies and requirements. Your extensive experience ...
-
IT Security Engineer
3 weeks ago
Crimson Enterprises Arden on the Severn, United StatesWith more than 1,500 stores in 19 European countries, C&A is one of the leading fashion companies in Europe. C&A welcomes over two million visitors daily to its stores and offers high-quality fashion at affordable prices for the whole family. We embrace the digital transformation ...
-
Security Engineering Manager, Investigations
4 days ago
Meta Washington, United StatesAre you interested in solving complex problems that lead to safer experiences for people using Meta's family of apps? Do you have an adversarial mindset and are excited about investigating and analyzing potential threats? Come join us at Meta Meta is seeking a security engineerin ...
-
Senior PKI Infrastructure Security Engineer
4 days ago
Fisher Investments Arlington, United States Full timeIt's an exciting time to be a member of the Fisher Investments Technology Department. We're investing in the future of our firm's technology and are building our team to achieve global growth. We are looking for a Senior PKI Security Engineer to support our Corporate Systems team ...
-
Security Engineer
3 weeks ago
NovaWorks Solutions Germantown, United StatesWe want to make a difference - are you with us? We ensure that over 80 million people in Germany can benefit from digital healthcare. Join us in shaping the healthcare system of tomorrow. · Your work area · DEMIS is the digital platform for Germany and the healthcare sector, prov ...
-
Cloud Security Engineer
3 days ago
Compass Pointe Consulting Vienna, United StatesCloud Security Engineer · Vienna, VA – Hybrid 2/3 days in office · Responsibilities encompass collaborating with other DevOps and SysOps teams to transition public facing, on-premises applications to the cloud; securing the configuration management of the cloud infrastructure; m ...
-
Base-2 Solutions, LLC Bethesda, MD, United StatesRequired Security Clearance: Top Secret/SCI City: Bethesda State/Territory: Maryland Travel: None Potential for Teleworking: Yes Schedule: Full Time DoD 8570 IAT Requirement: None DoD 8570 IAM Requirement: None DoD 8570 IASAE Requirement: None DoD CSSP Requirement: None Last Upda ...
-
Base-2 Solutions, LLC Bethesda, MD, United StatesRequired Security Clearance: Top Secret/SCI City: Bethesda State/Territory: Maryland Travel: None Potential for Teleworking: Yes Schedule: Full Time DoD 8570 IAT Requirement: None DoD 8570 IAM Requirement: None DoD 8570 IASAE Requirement: None DoD CSSP Requirement: None Last Upda ...
-
Base-2 Solutions, LLC Bethesda, MD, United StatesRequired Security Clearance: Top Secret/SCI City: Bethesda State/Territory: Maryland Travel: None Potential for Teleworking: Yes Schedule: Full Time DoD 8570 IAT Requirement: None DoD 8570 IAM Requirement: None DoD 8570 IASAE Requirement: None DoD CSSP Requirement: None Last Upda ...
-
Leidos Bethesda, United StatesR Description Are you ready to join Leidos all-star team? Through training, teamwork, and exposure to challenging technical work, let Leidos show how to accelerate your career path. The Leidos National Security Sector has an exciting opening for you as our next TS/SCI cleared App ...
-
Absolute Business Solutions Corp Bethesda, United StatesYou will need to login · before you can apply for a job. · Application Security Engineer with Security Clearance · ABSC has an exciting opening for you as our next TS/SCI–cleared Application Security Engineer supporting the Defense Intelligence Agency–s (DIA) National Media Exp ...
-
Application Security Engineer
3 weeks ago
Xcelerate Solutions Bethesda, MD, United StatesApplication Security Engineer - TS/SCI Xcelerate Solutions is seeking an Application Security Engineer supporting DIA-NMEC under our 10-year DOMEX Technology Platform (DTP) contract · We are seeking a talented Mid-Level Application Security Engineer to join our dynamic team and c ...
Application Security Engineer - Bethesda, United States - Base2 Solutions
Description
Base-2 Solutions is seeking a talented Application Security Engineer to join our dynamic team and contribute to the security posture of our software development lifecycle. We are looking for someone who can demonstrate strong cross functional collaboration in areas such as, but not limited to, development, production, and QA in a dynamic, secure, fast paced environment. Have impact as part of a mission focused, solutions oriented, and adaptive team that values innovation, collaboration, and professional development. Job Description
Pay & Benefit Highlights Compensation
