Application Security Engineer
Analytics
Application Security
Cyber Security
Cybersecurity Tools
Data Platform
Data Processing
Data Security
Engineer
Facilities Management
Incident Management
Incident Response
Information Security
Information Technology (IT)
Log Management
Management
Project Management
Risk Management
Security
Security Compliance
Security Information And Event Management
Security Monitoring
Security Operations
Security Standards
Security Testing
Software Security
Splunk
Splunk Siem
Job Description
Senior Application Security Engineer role focused on securing and sustaining CBP application systems across the full software lifecycle.
Responsibilities
- Administer, configure, maintain, tune, and secure CBP application systems throughout the software lifecycle.
- Develop and keep current application operations and maintenance procedures, tuning guidance, and software maintenance recommendations.
- Support ISSOs during ATO and ATT activities by producing and maintaining required application security documentation and evidence.
- Conduct weekly application security impact assessments and evaluate proposed software, products, and emerging technologies.
- Maintain continuous application monitoring, including critical-incident alerting, operational status reporting, and service-request tracking.
- Apply configuration management and change-control processes for application baselines, configuration items, engineering changes, and deployment records.
- Improve application logging, integrate relevant data with SIEM and vulnerability-management processes, and support remediation tracking.
Requirements
- Minimum 7 years of relevant application security or security engineering experience.
- Proven ability to lead application security operations, lifecycle management, configuration control, logging and monitoring, and vulnerability remediation efforts.
- Advanced experience supporting ATO or ATT activities, including security impact assessments, product evaluations, change approvals, and operational risk decisions.
- Strong written and oral communication skills for technical recommendations, procedures, status reporting, and coordination with ISSOs and Government leads.
Technologies
- SIEM
Location & Work Setup
- Ashburn, VA (onsite)
Benefits
- Competitive salary; paid twice per month
- Best in class medical coverage
- 100% of medical premiums covered by True Zero
- Company wide new business incentive programs
- Contribution Incentives (white papers, blog posts, internal webinars, etc.)
- 3 weeks of PTO starting + 11 Paid Holidays annually
- 401k Program with 100% company match on the first 4%
- Monthly reimbursement of Cell Phone and Home Internet costs
- Paternity/Maternity Leave
- Investment in training and certifications to broaden and deepen technical skills
AI Use Notice
- May use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications and analyzing.
- AI tools assist the recruitment team and do not replace human judgment.
- Final hiring decisions are made by humans.
- For details on how data is processed, contact the company.