Application Security Engineer

Applied Research Associates - Eglin Air Force Base, FL

Full-time - Mid Level

Eglin Air Force Base, FL

1,001-5,000 employees

Professional, Scientific, and Technical Services

About the position

The Application Security Engineer at Applied Research Associates, Inc. (ARA) is responsible for identifying and mitigating security risks in software applications developed in-house. This role involves consulting with developers and product managers to establish application security standards and practices, ensuring the integrity and security of software systems. The position is based at Eglin AFB, Florida, and is part of a dynamic team focused on innovative solutions in the field of application security.

Responsibilities

• Develop security training and guidance for internal and external development teams.
• Provide subject matter expertise on architecture, authentication, encryption, and systems security for in-house developed software applications.
• Create and maintain artifacts in a protected repository as the sole source of truth.
• Assess and integrate security tools, particularly open-source tooling, as needed.
• Assist with assessment activities to improve technology in use.
• Proactively identify and reduce security risks in supported software applications.
• Find and remove outdated and vulnerable code and libraries.
• Consult with developers and product managers to analyze and propose application security standards and methods.
• Handle communications with independent vulnerability researchers and design mitigation strategies for reported vulnerabilities.
• Educate developers on secure coding practices.

Requirements

• 2-4 years of related experience in application security.
• Ability to obtain Security + certification within 6 months of employment.
• Familiarity with common security libraries and RMF security controls.
• Experience with vulnerability assessments for C++ applications.
• Ability to discover and patch security vulnerabilities in software applications.
• Experience with Atlassian tools and CI/CD pipeline integration for security assessment.
• Heavy experience with SAST, DAST, OSA, and secure software supply chain.

Nice-to-haves

• Inquisitive nature for discovering root causes of issues.
• Proactive attitude towards challenges and technology.
• Drive and passion for technology and capabilities.
• Superior written and verbal communication skills.

Benefits

• 401-K Retirement (Traditional and Roth) with employer matching.
• Employee Stock Ownership Plan.
• Various insurance options including Flexible Spending Plan and Health Savings Account (HSA).
• Paid leave and holidays.