Application Security Engineer

Compunnel Software Group, Inc.; Reston (VA); On-site; USD 100,000 - 140,000; Full time

Job summary

A leading company in software solutions is seeking an Application Security Engineer in Reston, Virginia. This role emphasizes the integration of security throughout the development lifecycle, requiring deep application security knowledge and familiarity with DevOps tools. Ideal candidates have 3+ years in application security and proficiency in programming languages such as Java and Python, along with significant experience in cloud security, particularly AWS.

Qualifications

• 3+ years of experience in application security or DevSecOps roles.
• Proficiency in Java, Python, or Groovy.
• Experience with AWS services and cloud security best practices.

Responsibilities

• Implement and promote secure coding practices across development teams.
• Integrate security tools into CI/CD pipelines.
• Conduct threat modeling and security assessments.

Skills

Secure software development

Application security principles

DevOps practices

Problem-solving

Communication skills

Tools

Jenkins

UCD

GitLab

AWS

Fortify

Nexus

ZAP

Terraform

CloudFormation

Job description

We are seeking a highly skilled Application Security Engineer with a strong foundation in secure software development and DevOps practices.

The ideal candidate will have hands-on experience with Java or Python, deep knowledge of application security principles, and proficiency in DevOps tools such as Jenkins, UCD, and GitLab.

This role is critical in integrating security into the development lifecycle and ensuring the resilience of applications in cloud environments like AWS.

Key Responsibilities

• Implement and promote secure coding practices across development teams.
• Integrate security tools (e.g., Fortify, Nexus, ZAP) into CI/CD pipelines.
• Collaborate with developers and DevOps teams to remediate vulnerabilities and enhance security posture.
• Develop and maintain automation scripts using Java, Python, or Groovy.
• Design and implement security controls in AWS environments.
• Conduct threat modeling, code reviews, and security assessments.
• Monitor and respond to application-related security incidents.
• Stay up to date with emerging security threats, tools, and best practices.

Required Qualifications

• 3+ years of experience in application security or DevSecOps roles.
• Proficiency in Java, Python, or Groovy.
• Strong understanding of DevOps tools: Jenkins, UCD, GitLab, etc.
• Experience with AWS services and cloud security best practices.
• Hands-on experience with application security scanning tools (e.g., Fortify, Nexus, ZAP).
• Solid understanding of secure SDLC and CI/CD integration.
• Excellent problem-solving and communication skills.

Preferred Qualifications

• Security certifications such as CEH, OSCP, CSSLP, or AWS Security Specialty.
• Experience with container security and Kubernetes.
• Familiarity with Infrastructure as Code (IaC) tools like Terraform or CloudFormation.

Email ID * This field is required Please enter valid emailId.

Cell phone * This field is required Please enter valid cell phone.

First Name * This field is required Please enter valid first name.

Last Name * This field is required Please enter valid last name.