Application Security Engineer

SciTec is a dynamic non-traditional defense contractor that delivers advanced technologies in support of U.S. National Security and Defense. They are seeking an Application Security Engineer to secure mission-critical software systems by identifying, analyzing, and mitigating application-level vulnerabilities, while collaborating with software engineers to embed security into the development lifecycle.

What you'll do:

• Perform application security analysis using both automated and manual techniques, including:
• Static code analysis (SAST)
• Software composition analysis (SCA)
• Fuzzing
• Manual code and design reviews
• Identify, analyze, and help remediate application vulnerabilities
• Support software engineers in integrating security considerations into system and application designs
• Integrate and maintain application security tooling within CI/CD and DevSecOps pipelines
• Design, implement, and improve continuous integration security analysis tooling
• Tune and maintain security tools to reduce false positives and improve signal quality
• Assist development teams in understanding findings and implementing effective fixes
• Support threat modeling and secure design reviews

What they're looking for:

• Bachelor's degree plus 2+ years of professional experience in cybersecurity or software development, or equivalent experience
• 2+ years of experience focused on application/software security
• Experience analyzing source code for security flaws
• Familiarity with secure software development practices
• Strong analytical, problem-solving, and communication skills
• Detail-oriented with strong written and verbal communication abilities
• Ability to qualify for and maintain a DoD or DoE Secret security clearance
• Ability to meet DoD 8140.01 Cyberspace Workforce Management requirements within six months of hire
• Good verbal and written communication skills
• Attention to detail
• Active DoD Secret clearance or higher
• Experience identifying, exploiting, and remediating application vulnerabilities

Benefits:

• 4% Safe Harbor 401(k) match
• 100% company paid HSA Medical insurance, with a choice of 2 buy-up options
• 80% company paid Dental insurance
• 100% company paid Vision insurance
• 100% company paid Life insurance
• 100% company paid Long-term Disability insurance
• 100% company paid Hospital Indemnity insurance
• Voluntary Accident and Critical Illness insurance
• Short-term Disability insurance
• Annual Profit-Sharing Plan