Senior Application Security Engineer, Burp Suite DAST
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Application Security Engineer running enterprise DAST and SAST programs for a federal financial regulatory agency. Integrating security scans into CI/CD pipelines and designing controls for government systems.
Responsibilities:
- Act as a dedicated technical partner embedded within a federal financial regulatory agency’s application security team
- Run the enterprise application security testing program using Burp Suite DAST (Enterprise)
- Configure, schedule, and run dynamic application security scans, including authenticated scans across the application portfolio
- Build and maintain scan integrations in development environments and CI/CD pipelines, including Eclipse, JDeveloper, and Veracode pipeline scanning
- Navigate Linux/UNIX systems and troubleshoot basic website connectivity issues affecting scanning
- Design and implement enterprise-wide security controls for applications, systems, networks, and infrastructure services
- Map findings to OWASP Top 10, CVSS, CWE, WASC, and SANS-25
- Align application security work to NIST 800-53, FIPS, and FedRAMP
- Participate in a fully remote role supporting a federal government client
- Travel minimally
Requirements:
- 6+ years of Information Technology experience, with experience in cybersecurity or application security
- 3+ years of experience with Java, Python, .NET, or C#
- 3+ years of experience using Burp Suite DAST to perform Dynamic Application Security Testing (DAST)
- 2+ years of experience with Static Application Security Testing (SAST), using tools such as Veracode
- 3+ years of experience designing and implementing enterprise-wide security controls to secure applications, systems, networks, or infrastructure services
- 3+ years of experience with Linux or UNIX environments, including system navigation and troubleshooting basic website connectivity issues
- 2+ years of experience with Veracode and development environments such as Eclipse or JDeveloper, including pipeline development and integration
- Experience securing enterprise web applications and frameworks, including OWASP Top 10, CVSS, CWE, WASC, and SANS-25
- Knowledge of federal security and compliance standards, including NIST 800-53, FIPS, or FedRAMP
- Experience with Interactive Application Security Testing (IAST) capabilities and tools preferred
- High school diploma or GED required; Bachelor’s Degree preferred
- Experience can be substituted for education
- Public Trust / Suitability; applicants selected will be subject to a security investigation
- Must be a U.S. Citizen. No exceptions.
- Availability during core hours approximately 7:30 AM–4:30 PM US Eastern Time, Monday through Friday
- Expected 8.5-hour work day with a 30-minute break
Benefits:
- Medical Insurance
- Dental Insurance
- Vision Insurance
- Life Insurance
- Short Term & Long Term Disability
- 401k Retirement Savings Plan with Company Match
- Paid Holidays
- Paid Time Off (PTO)
- Tuition and Professional Development Assistance
Similar Jobs
Enterprise Application Engineer
Enterprise Application Engineer designing secure, automated server infrastructure for STCU, a member-focused credit union. Leading enterprise application deployments, monitoring, integrations, and system architecture.
Workshop Instructor – Electrical Application Engineer
ETAP Electrical Application Engineer delivering power-system workshops and digital learning content. Supporting customers with ETAP modeling, analysis, and technical demonstrations across North America.
Senior Security Engineer – Application Security
Senior Security Engineer securing OutSystems’ AI-powered enterprise low-code platform. Driving application security, automation, and secure-by-default practices across AI and agentic systems.
Application Integration Engineer
Application Integration Engineer designing secure APIs, integrations, and automation for Torc Robotics’ autonomous-truck software ecosystem. Supporting enterprise systems, data flows, and IT automation platforms.
Application Engineer – Building Systems
Application Engineer supporting construction insulation systems, technical compliance, and sales at Knauf Insulation. Coordinating architects, designers, stakeholders, and product development.
Field Application Engineer
Field Application Engineer helping Australian customers evaluate and adopt AMD FPGA, Adaptive SoC, and embedded x86 technologies. Supporting customer solutions through demonstrations, technical guidance, and specialist coordination.
Application Engineer – Cutting Tools
Application Engineer supporting Seco Tools' advanced metal-cutting solutions in Querétaro. Advising sales and customers through machining applications, training, troubleshooting, and product development.
Application Engineer – Cutting Tools
Application Engineer supporting Seco Tools’ advanced metal-cutting solutions in Querétaro. Providing technical sales support, CNC expertise, customer training, and productivity improvements.
Application Engineer – Cutting Tools
Application Engineer supporting sales, customers, and product growth for Seco Tools’ advanced metal-cutting solutions. Delivering machining expertise, training, troubleshooting, and technical projects in Querétaro.
Windows Systems Engineer – Application Packaging, Endpoint Environment
Windows Systems Engineer modernizing Tier One Technologies’ Windows endpoint environment. Packaging applications, automating remediation, and supporting enterprise device management.
Electrification Services Application Engineer
ABB field application engineer developing power-services proposals for industrial, utility, and commercial customers. Delivering technical solutions across the MD/DC/NJ/VA region with 25%-50% travel.
Senior Application Development Engineer
Senior Application Development Engineer building SQL Server, C#, and SSIS healthcare correspondence systems at Centene. Supporting claims data, letter generation, ETL workflows, and enterprise healthcare reporting.
Field Application Engineer
Field Application Engineer driving NVIDIA GPU, AI, networking, and embedded platform deployments for EMEA customers. Supporting hardware bring-up, firmware, software, and telecom AI-RAN integrations.
Field Application Engineer – Mobile
Field Application Engineer supporting customer mobile SDK, Bluetooth, and audio integrations for Bragi’s smart audio platform. Debugging connected-device issues and enabling partner product launches in China.
Application Security Engineer
Application Security Engineer operating Newfold Digital’s AppSec scanning program for its global web technology products. Triaging vulnerabilities and partnering with engineering teams on remediation.
Senior Application Security Engineer
Senior Application Security Engineer securing Windows applications for Malwarebytes’ cybersecurity, privacy, and identity protection products. Managing AppSec tooling, vulnerability triage, penetration testing, and bug bounty operations.
Sales & Application Engineer
Sales and Application Engineer supporting ANDRITZ paper-industry customers with technical solutions. Managing Northern Germany accounts, product trials, troubleshooting, and commercial sales activities.
Battery Sales Application Engineer
Battery Sales Application Engineer translating customer needs into lithium-ion cell and pack solutions. Supporting modeling, testing, BMS development, manufacturing partners, and product launches across the EU.
Application Engineer
Edifecs Application Engineer administering and optimizing EDI transaction platforms for SAIC’s defense, intelligence, and civilian technology missions. Supporting AWS environments, integrations, troubleshooting, and compliant transaction processing.
Quantum Application Engineer
Quantum Application Engineer helping Classiq’s enterprise customers design and deploy quantum applications. Leading onboarding, technical projects, and customer-driven product insights across EMEA.