Application Security Engineer Security Clearance

Position: Application Security Engineer with Security Clearance
Job Details The Application Security Engineer will perform the following:
* * Defines, maintains, and enforces application security best practices
* Conduct vulnerability assessment and manual/automated code reviews
* Demonstrate vulnerabilities to application owners and provide mitigation recommendations
* Proficient in any SAST, DAST, and OSA tools.
* In depth knowledge with any programming language like Java, .NET, C#, etc.
* Performs and conducts penetration tests and manual/automated code reviews.
* Writes comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancement
* In depth Knowledge of Secure Coding best practices and OWASP top 10, SANS 25, CVE, etc.
* Identify App Sec related tools/conduct tool analysis, and provide recommendations
* Vulnerability Management Specialist will have at least five years of working knowledge and hands-on experience with five or more of the following tools:
Burp Suite, Sonar Qube, OWASP/Maven, Fortify, Tenable, STIG Viewer, AWS Security Hub, AWS Inspector, ePO, Service Now, Jira, ADO, eMASS or equivalent GRC Tools.

Minimum Qualifications
* Bachelor's Degree in Computer Science, Engineering, or other Engineering or Technical discipline and a minimum of 5 years of working knowledge and hands-on equivalent relevant experience.
* Candidates must have a Security+ certification or similar
* Candidates must have an active secret security clearance.
* Position requires on-site work in Alexandria VA 2-3 days/week. Other Job Specific Skills
* Working knowledge and hands-on experience with the following:
* Burp Suite
* Sonar Qube
* OWASP/Maven
* Fortify, Tenable
* STIG Viewer
* AWS Security Hub
* AWS Inspector
* ePO, Service Now
* Jira
* ADO
* eMASS or equivalent GRC Tools #CJPost

Job Requirements:

* * Defines, maintains, and enforces application security best practices

* Conduct vulnerability assessment and manual/automated code reviews

* Demonstrate vulnerabilities to application owners and provide mitigation recommendations

* Proficient in any SAST, DAST, and OSA tools.

* In depth knowledge with any programming language like Java, .NET, C#, etc.

* Performs and conducts penetration tests and manual/automated code reviews.

* Writes comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancement

* In depth Knowledge of Secure Coding best practices and OWASP top 10, SANS 25, CVE, etc.

* Identify App Sec related tools/conduct tool analysis, and provide recommendations
* Vulnerability Management Specialist will have at least five years of working knowledge and hands-on experience with five or more of the following tools:
Burp Suite, Sonar Qube, OWASP/Maven, Fortify, Tenable, STIG Viewer, AWS Security Hub, AWS Inspector, ePO, Service Now, Jira, ADO, eMASS or equivalent GRC Tools.