Application Security Engineer

Booz Allen Hamilton

. Integrate security practices throughout the software development lifecycle to enhance and maintain the security posture of software .

Posted 9/18/2026full-timeAnnapolis Junction • Maryland • United StatesMid-LevelSenior💰 $86,900 - $198,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity and application security, with a strong focus on Secure SDLC, threat modeling, and vulnerability management. Capable of mentoring teams and translating complex technical risks into actionable business strategies.

Highest-signal resume keywords

Cybersecurity ExperienceApplication Security Tools ImplementationSecure SDLC AssessmentAgile and DevSecOps MethodologiesTechnical Leadership and Mentoring

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Secure SDLCThreat ModelingVulnerability ManagementApplication SecurityCode SigningArtifact IntegrityAPI SecurityContainer SecuritySoftware Composition AnalysisDependency Management

Soft Skills

Excellent Communication SkillsFacilitation SkillsMentoring Ability

Tools & Technologies

SASTDASTIaC ScanningKubernetesCloud Security

Certifications & Qualifications

Bachelor's Degree in CSMaster's Degree in Cybersecurity

Industry Keywords

OWASP SAMMNIST CSFISO 27001Healthcare SecurityFinancial Services Security

Tech Stack

Tools & technologies

CloudCyber SecurityKubernetesMicroservicesSDLC

About the role

Key responsibilities & impact

Integrate security practices throughout the software development lifecycle to enhance and maintain the security posture of software
Apply advanced consulting skills and extensive technical expertise, including full industry knowledge
Develop innovative solutions to complex problems
Work without considerable direction
Mentor and supervise team members

Requirements

What you’ll need

5+ years of experience in cybersecurity, application security, product security, or software engineering
Experience implementing or assessing Secure SDLC and application security programs, leading client engagements, managing multiple priorities, and performing architecture reviews, threat modeling, or security assessments
Experience with software supply chain security concepts, including SBOMs, dependency management, code signing, artifact integrity, and secure build pipelines
Experience implementing or evaluating application security tools such as SAST, DAST, SCA, IaC scanning, container security, API security, secrets detection, and software composition analysis
Experience with Agile, Scrum, and DevSecOps operating models in large-scale software development environments
Knowledge of secure software development principles, modern application architectures, and modern software architectures, including cloud-native, microservices, APIs, containers, Kubernetes, and serverless environments
Knowledge of authentication, authorization, cryptography, API security, and cloud security
Knowledge of vulnerability management processes, risk prioritization methodologies, and remediation workflows
Ability to translate complex technical risks into executive-level briefings, business cases, and actionable roadmaps and communicate effectively with technical and executive stakeholders
Bachelor's degree in CS, Cybersecurity, Information Systems, or Engineering
Nice If You Have: Experience designing or maturing enterprise application security and product security programs
Experience with secure development requirements for regulated industries, including healthcare, financial services, industrial control systems, automotive, aerospace, or critical infrastructure
Experience applying industry frameworks such as OWASP SAMM, BSIMM, NIST SSDF, NIST CSF, NIST AI RMF, ISO 27001, ISO / IEC 42001, IEC 62443, and MITRE ATT&CK or ATLAS
Experience developing technical proposals, responding to RFPs, creating Statements of Work (SOWs), and supporting business development initiatives
Experience leading executive workshops, stakeholder interviews, and technical design sessions
Ability to mentor junior team members, provide technical leadership, and contribute to practice development and thought leadership
Ability to travel up to 50% of the time, depending on client needs
Possession of excellent written and verbal communication skills
Possession of excellent facilitation skills
Master's degree in Cybersecurity, CS, Software Engineering, Information Assurance, or a related technical field

Benefits

Comp & perks

Health benefits
Life insurance
Disability benefits
Financial benefits
Retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care
Recognition awards program
Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs