What are the responsibilities and job description for the Application Security Engineer position at Dunhill Professional Search & Government Solutions?
Vulnerability Management Specialist will perform the following:
- Defines, maintains, and enforces application security best practices
- Conduct vulnerability assessment and manual/automated code reviews
- Demonstrate vulnerabilities to application owners and provide mitigation recommendations
- Proficient in any SAST, DAST, and OSA tools.
- In depth knowledge with any programming language like Java, .NET, C#, etc.
- Performs and conducts penetration tests and manual/automated code reviews.
- Writes comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancement
- In depth Knowledge of Secure Coding best practices and OWASP top 10, SANS 25, CVE, etc.
- Identify AppSec related tools/conduct tool analysis, and provide recommendations
- Vulnerability Management Specialist will have at least five years of working knowledge and hands-on experience with five or more of the following tools: BurpSuite, SonarQube, OWASP/Maven, Fortify, Tenable, STIG Viewer, AWS Security Hub, AWS Inspector, ePO, ServiceNow, Jira, ADO, eMASS or equivalent GRC Tools.
- Experience in infrastructure and container scanning
Minimum Qualifications
- Bachelor’s Degree in Computer Science, Engineering, or other Engineering or Technical discipline and a minimum of 5 years of working knowledge and hands-on equivalent relevant experience.
- Candidates must have a Security certification or similar
- Candidates must have an active secret security clearance.
- Position requires on-site work in Alexandria VA 2-3 days/week.
Other Job Specific Skills
- Working knowledge and hands-on experience with the following:
- BurpSuite
- SonarQube
- OWASP/Maven
- Fortify, Tenable
- STIG Viewer
- AWS Security Hub
- AWS Inspector
- ePO, ServiceNow
- Jira
- ADO
- eMASS or equivalent GRC Tools