Application Security Engineer

Application Security Engineer The Opportunity: - Integrate security practices throughout the software development lifecycle to enhance and maintain the security posture of software. - Apply advanced consulting skills and extensive technical expertise, including full industry knowledge. - Develop innovative solutions to complex problems. - Work without considerable direction and mentor and supervise team members. You Have: - 5+ years of experience in cybersecurity, application security, product security, or software engineering - Experience implementing or assessing Secure SDLC and application security programs, leading client engagements, managing multiple priorities, and performing architecture reviews, threat modeling, or security assessments - Experience with software supply chain security concepts, including SBOMs, dependency management, code signing, artifact integrity, and secure build pipelines - Experience implementing or evaluating application security tools such as SAST, DAST, SCA, IaC scanning, container security, API security, secrets detection, and software composition analysis - Experience with Agile, Scrum, and DevSecOps operating models in large-scale software development environments - Knowledge of secure software development principles, modern application architectures, and modern software architectures, including cloud-native, microservices, APIs, containers, Kubernetes, and serverless environments - Knowledge of authentication, authorization, cryptography, API security, and cloud security - Knowledge of vulnerability management processes, risk prioritization methodologies, and remediation workflows - Ability to translate complex technical risks into executive-level briefings, business cases, and actionable roadmaps and communicate effectively with technical and executive stakeholders - Bachelor's degree in CS, Cybersecurity, Information Systems, or Engineering Nice If You Have: - Experience designing or maturing enterprise application security and product security programs - Experience with secure development requirements for regulated industries, including healthcare, financial services, industrial control systems, automotive, aerospace, or critical infrastructure - Experience applying industry frameworks such as OWASP SAMM, BSIMM, NIST SSDF, NIST CSF, NIST AI RMF, ISO 27001, ISO/IEC 27001, IEC 62443, and MITRE ATT&CK or ATLAS - Experience developing technical proposals, responding to RFPs, creating Statements of Work (SOWs), and supporting business development initiatives - Experience leading executive workshops, stakeholder interviews, and technical design sessions - Ability to mentor junior team members, provide technical leadership, and contribute to practice development and thought leadership - Ability to travel up to 50% of the time, depending on client needs - Possession of excellent written and verbal communication skills - Possession of excellent facilitation skills - Master's degree in Cybersecurity, CS, Software Engineering, Information Assurance, or a related technical field Compensation - At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. - Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. - Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. - We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page. - Salary at Booz Allen is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. - The projected compensation range for this position is $86,900.00 to $198,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen’s total compensation package for employees. - This posting will close within 90 days from the Posting Date. Identity Statement - As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. - You are expected to be on camera during interviews and assessments. - We reserve the right to take your picture to verify your identity and prevent fraud. Candidate AI Usage Policy - AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. - As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided. Work Model - Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. - To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings. Remote - If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility. Hybrid - If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. - You may also be required to work from or visit a customer facility. Onsite - If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role. Commitment to Non-Discrimination - All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.