Sr. Application Security Engineer - Tysons, VA

Overview

Software Guidance & Assistance, Inc., (SGA), is seeking a Sr. Application Security Engineer for a Contract assignment with one of our premier Regulatory clients in Tysons, VA.

The main function of the Sr. Application Security Engineer is to plan, coordinate and implement application security practices in each phase of the software development life cycle through testing, remediation support, tool evaluation, etc. This role involves evaluating security vulnerabilities, security tools, implementing security solutions, and leveraging latest solutions to secure code review capabilities.

• Perform security assessments and manual penetration testing using tools such as Burp Suite and other proxy tools.
• Triage static (SAST), dynamic (DAST), interactive (IAST) analysis results to identify, prioritize and remediate security vulnerabilities.
• Integrate security practices into CI/CD pipeline to support Dev Sec Ops  initiative.
• Maintain documentation of security findings, remediation plans, and compliance requirements.
• Develop and interpret security policies and procedures. Participate in security compliance efforts.
• Develop and deliver training materials and perform general security awareness and specific security technology training.
• Evaluate and recommend new and emerging security products and technologies.
• Leverage GenAI technologies to scale application security reviews and automate code analysis.
• Evaluate various application security tools/capabilities such as SAST, DAST, IaC, Secrets detection tools.
• Stay current with emerging security threats and countermeasures.
• Ability to train or explain common security issues to raise security awareness among developers and assurance engineers.
• Perform AWS configuration reviews.

• Bachelor's degree in a technical field such as computer science, computer engineering or related field required.
• 5+ years of experience in Cyber security and application security.
• Familiarity with SAST, DAST, IAST tools.
• Understanding of AWS is required.
• Deep understanding of OWASP top issues and remediation guidelines.
• Proficiency in one or more programming languages (Java, Python, JavaScript preferred).
• Understanding of CI/CD tools such as Jenkins and Git Lab.
• Familiarity with GenAI tools is a plus.
• Strong experience and detailed technical knowledge in security engineering, system and network security, authentication and security protocols, cryptography, and application security.
• Candidates with a software development background are a plus.
• Consistent implementation of security solutions.
• Experience in infrastructure or application-level vulnerability testing and auditing.
• Certifications like GWAPT, OSWE, Burp Suite Certified Practitioner are good to have.

SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants to more than 1,000 engagements. When we say let''s work better together, we mean it. You''ll join a diverse team built on core values: customer service, employee development, and quality and integrity in everything we do.

Be yourself, love what you do and find your passion ase find us at

SGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We are committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, and our services, programs, and activities.

Please visit our company EEO page to request an accommodation or assistance regarding our policy.