What are the responsibilities and job description for the Application Security Engineer position at Strategy Resources, LLC?
Application Security Engineer
The areas of focus are Burp Enterprise experience performing DAST scanning. We are finding many candidates have experience with Burp Professional, but this is focused on SAST scanning. They should also have Veracode experience performing SAST scanning. They need to know their way around a Linux environment and some type of coding and/or scripting experience is preferred.
· 6 years of Information Technology experience
· 3 years of experience with supporting Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and IDE Plug-in environments using Burp Suite
· 1 year of experience with supporting Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and IDE Plug-in environments using Veracode
· 2 years of experience with Java, Python, .NET, or C#
· 3 years of experience using the design and implementation of enterprise-wide security controls to secure applications, systems, network, or infrastructure services
· Experience with Eclipse, JDeveloper, including pipeline development, or Visual Studio
· Experience with securing enterprise web applications and OWASP Top 10, CVSS, CWE, WASC, and SANS-25
· Knowledge of federal compliance standards, including NIST 800-53, FIPS, or FedRAMP
· 2 years experience working in Linux based environments, including navigating and troubleshooting basic website connectivity issues
· Ability to obtain a security clearance
· IT related bachelors degree
Additional Qualifications:
· Experience with Interactive Application Security Testing (IAST) capabilities and tools
· Experience with HackerOne
· Experience with Selenium
· Experience writing bash scripts
· Experience with OWASP ZAP or Burp Proxy
Salary : $140,000 - $160,000