APPLICATION SECURITY ENGINEER

Fairfax, VA - USA

Monthly Salary: Not Disclosed

Posted on: 10 hours ago

Vacancies: 1 Vacancy

Job Summary

Role: Application Security Engineer

Location: Onsite in Fairfax VA 3 days and in Washington DC 2 days per week.

Duration: Long Term Contract

Positions Require a Secret Clearance

Job Description:

The Application Security Engineer position supports secure application development and cybersecurity operations for Federal DoD programs. The role requires a deep expertise in application security software development federal cybersecurity standards and secure architecture. Will be responsible for senior-level leadership in information security secure SDLC integration and compliance with federal security frameworks such as NIST 800 53 NIST 800 37 RMF FedRAMP and agency-specific security baselines.

Primary Responsibilities:

Serve as the primary application security SME for the project ensuring compliance with NIST FISMA FedRAMP DHS DoD and agency-specific security requirements.
Guide system teams through Risk Management Framework (RMF) steps related to application security including control implementation evidence gathering and POA&M mitigation.
Lead security architecture reviews for mission-critical systems ensuring secure-by-design principles across federal systems and networks.
Integrate security into the federal SDLC by defining secure coding standards conducting code reviews and providing architectural input.
Conduct and lead advanced security testing.
Provide CISSP-level expertise on risk evaluation compensating controls and secure architecture guidance.
Guide enterprise risk posture by advising leadership on vulnerabilities mitigations and long-term remediation planning.
Ensure secure configurations of cloud resources within AWS GovCloud FedRAMP environments.
All other duties as assigned by management.

Skills and Qualifications:

Bachelors degree in computer science or related field
10 years in application development and IT security
Experience performing risk assessments for Federal systems in AWS GovCloud
Experience supporting FedRAMP High/Moderate systems
Knowledge in Java Python HTML SQL CSS and cloud computing
Excellent communication and management skills.

Certifications Required:

Certified Secure Software Lifecycle Professional (CSSLP)
Certified Information Systems Security Professional (CISSP)
CompTIA Security

Role: Application Security Engineer Location: Onsite in Fairfax VA 3 days and in Washington DC 2 days per week. Duration: Long Term Contract Positions Require a Secret Clearance Job Description: The Application Security Engineer position supports secure application development and cybersecurity...