L

Leidos

Builds technology for defense and civil agencies

Application Security Engineer

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeAshburn, VA, USA$107.9k - $195.1k

About the Job

Requirements

  • A Bachelor of Science degree in Information Technology, Software Engineering, or a related field, and 8–12 years of prior relevant experience.
  • At least 3 years of prior application security experience focused on Static Application Security Testing (SAST), Software Composition Analysis (SCA), and Dynamic Application Security Testing (DAST).
  • Knowledge of secure coding practices and integrating them into the software development life cycle (SDLC).
  • Familiarity with common security frameworks and standards.
  • Strong programming and scripting skills.
  • Excellent communication and collaboration skills.
  • Experience working in an Agile project management environment.
  • Must have a Top Secret clearance with Sensitive Compartmented Information (SCI).
  • Must be able to report to the Ashburn, Virginia office up to five days per week.

Responsibilities

  • Ensure continuous monitoring of all CSD-managed applications and implement an alerting system for critical incidents.
  • Participate in market research to identify new security solutions as needed to avoid obsolescence and improve the overall security posture.
  • Develop, deploy, maintain, and/or assist with integrating Machine Learning (ML) and Artificial Intelligence (AI) into CBP’s security tool suite.
  • Integrate security best practices into the software development life cycle and ensure security is embedded from design to deployment.
  • Use Static Application Security Testing (SAST) tools to analyze source code for vulnerabilities.
  • Work with development teams and Information System Security Officers (ISSOs) to remediate identified security issues.
  • Conduct security assessments using Micro Focus WebInspect and other Dynamic Application Security Testing (DAST) tools.
  • Collaborate with development teams to address and remediate dynamic security findings.
  • Implement and manage container security tools, focusing on Anchore, to ensure secure container deployments.
  • Provide recommendations for secure container orchestration.
  • Ensure systems and applications comply with Security Technical Implementation Guides (STIGs).
  • Establish and maintain the definitive current basis for control and status accounting of application systems and their configuration items.
  • Select configuration items at appropriate levels for application products to facilitate documentation and control.
  • Tune application logging capabilities for efficiency, identify shortfalls, and recommend improvements and new technologies for application logging.
  • Support the CSD Service Desk in managing and executing the application Vulnerability Identification and Remediation process.

Desired Qualifications

  • A master’s degree and 1–2 years of prior application security experience focused on SAST, SCA, and DAST.
  • Experience with data engineering tools such as Kubernetes/Rancher and Cloudera.
  • Experience with Configuration Management and Infrastructure as Code (IaC) tools such as Salt or Ansible.
  • Experience with scripting languages, continuous integration/continuous delivery (CI/CD) tools, Elasticsearch, or GitLab.
  • Experience working in air-gapped environments.
  • Experience working in large computing environments with more than 1,000 endpoints.

About the Company

Leidos

Builds technology for defense and civil agencies

Leidos develops technology and runs services for defense, intelligence and civilian agencies, as well as healthcare and commercial customers. It combines software and engineering work with systems integration, building secure networks and equipment used in demanding operations. Its portfolio includes medical services, energy infrastructure design and technology that supports military missions, linking specialist businesses under one parent. Customers pay through contracts for delivered systems and services, with payment tied to labor, costs or agreed project milestones. Leidos traces its roots to a company founded in 1969 and is headquartered in Reston, Virginia.

Company size
10,001+
Company stage
IPO
Headquarters
Reston, VA
Founded
1969

Recently Posted Jobs

Explore more opportunities at Leidos

See more jobs