Application Security Analyst

Application Security Analyst

The Opportunity:

Support Booz Allen’s internal Enterprise Cybersecurity team by managing application security vulnerabilities. Leverage Static Application Security Testing (SAST) tools to identify and remediate code-level vulnerabilities. Conduct web application scanning to detect security weaknesses in internal and client-facing applications. Collaborate with development teams to integrate security into the software development lifecycle (SDLC) and promote secure coding practices. Stay current with emerging application security threats and collaborate with other cybersecurity teams in a Cyber Fusion Center (CFC) environment to understand the impact of application vulnerabilities and possible risks to the global enterprise.

Conduct direct outreach to development teams to ensure rapid remediation of critical findings. Assist the Attack Surface Management team lead with providing metrics and KPIs to other operational teams and senior leadership as needed. Due to the nature of work performed within this facility, U.S. citizenship is required.

You Have:4+ years of experience in application security, including vulnerability assessment and remediation

Experience with Static Application Security Testing (SAST), secret scanning, and open-source library dependency vulnerability scanning tools

Knowledge of secure coding practices and common application vulnerabilities, including OWASP Top 10

Knowledge of software development lifecycle (SDLC) and Dev Sec Ops  principles

Ability to communicate effectively with clients, supporting teams, and management

Ability to triage and prioritize vulnerabilities based on risk and business impact

Associate's degree and 7+ years of experience supporting IT projects and activities, Bachelor's degree and 5+ years of experience supporting IT projects and activities, Master's degree and 3+ years of experience supporting IT projects and activities, or 10+ years of experience supporting IT projects and activities in lieu of a degree

Nice If You Have:

Experience integrating application security tools into CI/CD pipelines 

Experience with Selenium testing framework, Dynamic Application Security Testing (DAST) or Interactive Application Security Testing (IAST) tools

Experience with cloud application security in AWS, Azure, or Google Cloud Platform

Experience with Git Hub Knowledge  of programming languages such as Java, Python, C#, or Java Script Knowledge  of container security and Kubernetes environments

Knowledge of threat modeling and secure architecture design

Possession of excellent verbal and written communication skills

Bachelor's degree in Computer Science, Cybersecurity, or a related field  GWAPT, CSSLP, CEH, or Security+ Certification Compensation At  Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values.

Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Salary at Booz Allen is determined by various factors, including but not limited to location, the individual’s particular combination of education,…