Application Security EngineerLocation: Hanscom AFB MA, Langley AFB VA, or El Segundo, CA
Work Type: Onsite
Remote Work: No

Job Description

As a cyber professional, you know that understanding adversary tactics, techniques, and procedures is vital to producing the intel that enables the success of mission owners. Here, you can apply your skills and broad knowledge to inform strategies and mitigate the most pressing vulnerabilities. Here, you aren’t just deciphering reports. You’re telling the story to inform our nation’s most far-reaching cyber security decisions.

As an Application Security Engineer on our team, you’ll help customers solve problems using the latest tools like Checkmarx, SonarQube, and OWASP ZAP. Using penetration testing, vulnerability assessments, risk assessments, and threat monitoring, you’ll work alongside multiple stakeholders to evaluate risk and make meaningful recommendations. You’ll monitor security environments and identify security gaps through the eyes of an adversary.

We are committed to creating an environment where you can expand your cyber career through mentoring, the opportunity to leverage new resources, and the ability to gain in-demand certifications to sharpen your skill set. With opportunities supporting both the private and public sectors across multiple geographies, your career is only limited by your own appetite for exploration.

Work with us to secure our systems, networks, and crucial infrastructures.

Qualifications

6+ years of experience in application security and secure software development with expertise in web application security, API security, and secure coding practices
3+ years of experience performing security architecture reviews, threat modeling, and security risk assessments for enterprise applications and microservices
Experience implementing security testing automation, including SAST, DAST, and SCA tools within CI/CD pipelines such as Checkmarx, SonarQube, or OWASP ZAP
Experience with secure coding practices across multiple languages such as Java, Python, or JavaScript, developing secure coding guidelines, and performing code reviews
Experience leading security assessments, including penetration testing, vulnerability management, and implementing security controls based on OWASP Top 10 and SANS CWE
Experience in API security, OAuth or OIDC implementation, and building secure authentication or authorization frameworks for cloud-native applications
Experience in cloud security architecture for AWS or Azure, including identity management, encryption, secrets management, and security monitoring
Secret clearance
HS diploma or GED
Ability to obtain a DoD 8570 IAT Level II Compliance Certification within 30 days of start date

Additional Qualifications

Experience with cloud-native application security tools such as Snyk, Aqua Security, or Prisma Cloud
Experience with container security and Kubernetes security best practices
Experience with GraphQL security testing and securing serverless architectures
Experience in security incident response or red team operations
Experience contributing to open-source security tools or research
Knowledge of compliance frameworks, including SOC2, PCI-DSS, or HIPAA, and security control implementation
Bachelor's or Master's degree in an IT field, including CS or Cybersecurity
OSCP, AWS Security Specialty, GWEB, GWAPT, or CCSP Certification

Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.

Compensation and Benefits
Salary Range: $90,000 - $195,000 (Compensation is determined by various factors, including but not limited to location, work experience, skills, education, certifications, seniority, and business needs. This range may be modified in the future.)

Benefits: Gridiron offers a comprehensive benefits package including medical, dental, vision insurance, HSA, FSA, 401(k), disability & ADD insurance, life and pet insurance to eligible employees. Full-time and part-time employees working at least 30 hours per week on a regular basis are eligible to participate in Gridiron’s benefits programs.

Gridiron IT Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status or disability status.

Gridiron IT is a Women Owned Small Business (WOSB) headquartered in the Washington, D.C. area that supports our clients' missions throughout the United States. Gridiron IT specializes in providing comprehensive IT services tailored to meet the needs of federal agencies. Our capabilities include IT Infrastructure & Cloud Services, Cyber Security, Software Integration & Development, Data Solution & AI, and Enterprise Applications. These capabilities are backed by Gridiron IT's experienced workforce and our commitment to ensuring we meet and exceed our clients' expectations.

Job Types: Full-time, Permanent, Contract

Pay: $120,000.00 - $195,000.00 per year

Benefits:

401(k)
401(k) matching
Dental insurance
Employee assistance program
Flexible schedule
Flexible spending account
Health insurance
Health savings account
Life insurance
Paid time off
Parental leave
Professional development assistance
Referral program
Retirement plan
Vision insurance

Compensation Package:

Bonus opportunities
Hourly pay
Performance bonus
Quarterly bonus
Signing bonus
Weekly pay
Yearly bonus
Yearly pay

Schedule:

8 hour shift
Day shift
Monday to Friday
No nights
No weekends

Experience:

Java: 5 years (Required)
JavaScript: 5 years (Required)
Application Security: 3 years (Required)

Security clearance:

Secret (Required)

Work Location: In person

Gridiron IT

New Jobs

Application Security Engineer (Secret clearance required)