Sr. Application Security Engineer at Edgesource%20corporation

COMPANY OVERVIEW For over 25 years, Edgesource Corporation has served as an innovative technology service provider for the Department of Defense (DOD), Department of Homeland Security (DHS), Department of State (DOS), the U.S. Intelligence Community, Law Enforcement, and other federal, state, and commercial clients locally, nationally, and abroad. From providing boutique technical solutions in support of the DOD Counter Unmanned Aerial Systems (CUAS) mission set to addressing the most critical Cybersecurity threats facing our nation as a prime contractor with the DHS Cybersecurity & Infrastructure Security Agency (CISA), a career at Edgesource is an opportunity to do meaningful, interesting, and impactful work. POSITION OVERVIEW The Senior Application Security Engineer is responsible for advancing the security, integrity, and resilience of enterprise applications through automation-first security practices, vulnerability management, and secure software development integration. This role focuses heavily on leveraging RPA and automation to scale security operations, embed controls into CI/CD pipelines, and drive measurable risk reduction across the organization. The ideal candidate combines deep cybersecurity and application security expertise with strong automation and engineering skills, enabling them to design practical, scalable solutions that integrate seamlessly into modern development environments. JOB DUTIES - Lead the implementation of application security practices across the SDLC, including secure coding, threat modeling, and vulnerability management - Design and deploy automated security controls within CI/CD pipelines (SAST, DAST, SCA, secrets scanning, policy gates) - Leverage RPA and automation tools to streamline vulnerability detection, triage, reporting, and remediation workflows - Conduct application security assessments, including code reviews, dynamic testing, and manual analysis - Identify, prioritize, and remediate application and API vulnerabilities aligned with OWASP Top 10 and modern threat landscapes - Partner with engineering, DevOps, and product teams to implement secure-by-design and DevSecOps practices - Integrate security into release pipelines, ensuring continuous monitoring, scanning, and compliance enforcement - Support and improve the vulnerability management lifecycle, including metrics, reporting, and risk-based prioritization REQUIRED QUALIFICATIONS - 5–7 years of experience in application security, cybersecurity engineering, or secure software development - Must be able to obtain and maintain a favorable contractor fitness determination. - Strong expertise in secure coding practices, OWASP Top 10, threat modeling, and vulnerability management - Hands-on experience with application security tools (SAST, DAST, SCA, API security testing) - Experience integrating security into CI/CD pipelines (DevSecOps practices) - Experience with or exposure to RPA platforms (UiPath, Automation Anywhere, Blue Prism) - Knowledge of API security, authentication, and authorization mechanisms (OAuth2, SAML, JWT) - Experience with security monitoring and logging tools (Splunk, CloudWatch, etc.) NICE TO HAVE QUALIFICATIONS - Experience with process automation of security workflows (SOAR tools or custom automation frameworks) - Familiarity with cloud security architectures (AWS, Azure, GCP) - Knowledge of software supply chain security tools (e.g., NexusIQ, Snyk) - Experience working in regulated environments (NIST, FISMA, Zero Trust) WORKING AT EDGESOURCE As an ISO 9001:2015 certified and CMMI Level 3 appraised small business, Edgesource specializes in providing a variety of technical solutions to include software development, database services, enterprise networking, data center virtualization, and management support. We are always seeking top-talent to join our team in helping to address the most critical technical challenges facing our nation. At Edgesource, we understand that our employees are our greatest asset, and as such we offer a wide array of benefits to support the well-being of our staff to include: - Flexible PTO Policy + 11 Paid Holidays - Flexible Work Schedules (Remote / Hybrid) - Medical / Dental / Vision / Flexible Spending Account (FSA) - 401k Plan with Match - Tuition & Professional Development Support - Commuter Benefits - Bonus & Employee Referral Programs - Career Growth Opportunities DISCLAIMER All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. Edgesource is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation, please contact our Recruiting Department by email at [Upgrade to PRO to see contact] or by phone at (703) 837-0550