Senior Application Security Engineer, Burp Suite DAST

🔥 12 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

💻 Application Engineer

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

phia, LLC

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2011

💼 Consulting

🎖️ Defense

📦 Logistics

Consulting • Defense • Logistics

<phia, LLC> is a cybersecurity firm that provides cyber assessments, cybersecurity operations, security engineering and development, and advisory services to help clients defend against advanced threats. The company leverages threat intelligence, operations-informed techniques, and industry standards to build resilient solutions and support mission success for its clients and partners.

📋 Description

• Act as a dedicated technical partner embedded within a federal financial regulatory agency’s application security team • Run the enterprise application security testing program using Burp Suite DAST (Enterprise) • Configure, schedule, and run dynamic application security scans, including authenticated scans across the application portfolio • Build and maintain scan integrations in development environments and CI/CD pipelines, including Eclipse, JDeveloper, and Veracode pipeline scanning • Navigate Linux/UNIX systems and troubleshoot basic website connectivity issues affecting scanning • Design and implement enterprise-wide security controls for applications, systems, networks, and infrastructure services • Map findings to OWASP Top 10, CVSS, CWE, WASC, and SANS-25 • Align application security work to NIST 800-53, FIPS, and FedRAMP • Participate in a fully remote role supporting a federal government client • Travel minimally

🎯 Requirements

• 6+ years of Information Technology experience, with experience in cybersecurity or application security • 3+ years of experience with Java, Python, .NET, or C# • 3+ years of experience using Burp Suite DAST to perform Dynamic Application Security Testing (DAST) • 2+ years of experience with Static Application Security Testing (SAST), using tools such as Veracode • 3+ years of experience designing and implementing enterprise-wide security controls to secure applications, systems, networks, or infrastructure services • 3+ years of experience with Linux or UNIX environments, including system navigation and troubleshooting basic website connectivity issues • 2+ years of experience with Veracode and development environments such as Eclipse or JDeveloper, including pipeline development and integration • Experience securing enterprise web applications and frameworks, including OWASP Top 10, CVSS, CWE, WASC, and SANS-25 • Knowledge of federal security and compliance standards, including NIST 800-53, FIPS, or FedRAMP • Experience with Interactive Application Security Testing (IAST) capabilities and tools preferred • High school diploma or GED required; Bachelor’s Degree preferred • Experience can be substituted for education • Public Trust / Suitability; applicants selected will be subject to a security investigation • Must be a U.S. Citizen. No exceptions. • Availability during core hours approximately 7:30 AM–4:30 PM US Eastern Time, Monday through Friday • Expected 8.5-hour work day with a 30-minute break

🏖️ Benefits

• Medical Insurance • Dental Insurance • Vision Insurance • Life Insurance • Short Term & Long Term Disability • 401k Retirement Savings Plan with Company Match • Paid Holidays • Paid Time Off (PTO) • Tuition and Professional Development Assistance

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume