Cyber Applications Security Engineer

Primary Responsibilities

• Support the Cybersecurity Division (CSD) Cyber Weapons and Interdiction (CWIB) branch.
• Perform web application scanning & application security assessments.
• Perform manual application testing to identify vulnerabilities or deviations from software standards.
• Provide timely and detailed reports, with proofs of findings and analysis of risk.
• Aid in integrating static & dynamic web application assessments into secure SLDC lifecycles.
• Use SharePoint and other collaboration tools to collect, monitor, and manipulate C&A documentation through the collection, review, approval, and final distribution processes.
• Support Cybersecurity IT internal and external inspection teams.
• Supports the Cybersecurity Division (CSD), staff, and senior management in areas of Risk Management Framework (RMF) for DoD IT, DoD/Army Regulations, Incident Response, Software Assurance, and related Cyber disciplines.
• Work closely with representatives from other divisions and branches (IT, Networking, etc.) to request information, provide clarification, and validate findings, evidence, and POA&M statements.
• Maintain and meet deliverable schedules. Must be proactive in obtaining information from multiple internal and external teams to complete requirements on schedule.

Required Skills

• Development background is required.
• Microsoft .NET or Java development experience required. Microsoft .NET is preferred.
• Knowledge of SDLC methodologies.
• Intermediate to advanced knowledge of secure code development practices and OWASP Top 10 web application security issues.
• Web services development and design with integrated security engineering experience.
• Excellent English verbal and writing skills including report generation, presentations, and technical writing.
• Highly organized with the ability to independently maintain schedules and meet deadlines.

Required Qualifications

• Minimum 2 years’ relevant experience.
• Bachelor’s degree in Information Technology, Computer Science, or related field. Substantial experience in lieu of degree may be considered.
• Current DoD 8570.01-M Information Assurance Technical IAT Level II (IAT II) baseline certification, such as Security+ CE.
• U.S. citizen with active DoD SECRET level security clearance.