Application Security Engineer, Lead

Booz Allen Hamilton is seeking a Lead Application Security Engineer to support enterprise-wide application and network security for mission-critical network systems. In this onsite role based in Fort Meade, MD, you will help implement and integrate information systems, address complex network challenges, and strengthen security, reliability, and availability across national security-related missions.

Role Focus

• Develop enterprise-wide infrastructure and improve security, reliability, and availability for mission-critical network systems
• Implement and integrate information systems, including routing and switching technologies
• Optimize client operations and modernization using knowledge of network protocols, equipment, emerging technology, and configurations
• Apply technical curiosity and industry standards to create measurable impact on national security-related missions

Key Responsibilities

• Troubleshoot and resolve complex network issues, analyze working infrastructures, and increase operational protection
• Modernize client environments by leveraging practical expertise across network protocols, equipment, configurations, and emerging technology
• Use standards-based knowledge to support impact on missions tied to national security
• Implement and integrate information systems, including routing and switching technologies

Required Qualifications

• 5+ years of experience implementing Zero Trust compliant application and network security services and controls
• 5+ years of experience with next-generation firewalls, including Palo Alto, Versa, Cisco, Fortinet, or Juniper
• 5+ years of experience with application delivery products, including F5, Nginx, A10, or NetScaler
• Experience with host-based micro-segmentation solutions such as ColorTokens or Illumio
• Experience leading cross-functional teams across various technologies and environments
• Experience with DoD enterprise networks, including defense infrastructure and DMZ and application security
• Secret clearance
• HS diploma or GED

Technologies

• Palo Alto, Versa, Cisco, Fortinet, Juniper
• F5, Nginx, A10, NetScaler
• ColorTokens, Illumio

Preferred Qualifications

• Experience with Palo Alto Next-Generation Firewalls and Panorama
• Experience with F5 BIG-IP Application Security Manager (ASM) and Advanced Web Application Firewall (AWAF)
• Experience securing enterprise web applications to be compliant with OWASP Top 10, CVSS, CWE, WASC, and SANS-25
• Experience working with Infrastructure-as-Code (IaC) tools, including Terraform and deploying IaC with VS Code
• Knowledge of Azure Cloud and AWS Cloud environments
• Knowledge of federal compliance standards, including DoD STIG, NIST 800-53, FIPS, and DoD IL5 and 6

Clearance and Hiring Process

• Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.

Compensation

• Projected compensation range: $99,000.00 to $225,000.00 (annualized USD)
• This posting will close within 90 days from the posting date.

Identity Verification and Interview Requirements

• You will be asked to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud.
• You are expected to be on camera during interviews and assessments.
• The company reserves the right to take your picture to verify identity and prevent fraud.

Candidate AI Usage Policy

• Using AI or other tools to assist with responses during interviews (in-person or virtual) is prohibited unless permission is explicitly provided.

Work Model

• Onsite: work will primarily be performed full-time at a customer facility, where employees will collaborate directly with colleagues and customers as required by the role.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.