100% Remote --Contract-- Application Security Engineer

Please focus on these areas of skills.

• Burp and Veracode are still core areas, but we are more focused on experience with DAST using Burp. Burp Enterprise and Burp Pro are both relevant but having experience with Burp Enterprise is the ideal scenario.
• Having experience with Veracode performing SAST is still needed, but if you find a strong resource with Burp Enterprise experience performing DAST, we are not as concerned about the Veracode SAST experience.
• Good Linux Skills. Experienced working with Linux command line
• Understanding DevSecOps work. Familiarity with Kubernetes
• Development experience Coding/scripting

Application Security Engineer

Burp and Veracode are currently the areas of focus.

• 6+ years of Information Technology experience
• 3+ years of experience with supporting Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and IDE Plug-in environments using Veracode and Burp Suite
• 2+ years of experience with Java, Python, .NET, or C#
• 3+ years of experience using the design and implementation of enterprise-wide security controls to secure applications, systems, network, or infrastructure services
• Experience with Eclipse, JDeveloper, including pipeline development, or Visual Studio
• Experience with securing enterprise web applications and OWASP Top 10, CVSS, CWE, WASC, and SANS-25
• Knowledge of federal compliance standards, including NIST 800-53, FIPS, or FedRAMP
• Knowledge of Linux or UNIX environments, including navigating and troubleshooting basic website connectivity issues
• HS diploma or GED

Additional Qualifications:

• Experience with Interactive Application Security Testing (IAST) capabilities and tools
• Experience with HackerOne
• Experience with Selenium
• Experience writing bash scripts
• Experience with OWASP ZAP or Burp Proxy