Senior Application Security Engineer, Burp Suite DAST

phia, LLC

. Act as a dedicated technical partner embedded within a federal financial regulatory agency’s application security team .

Posted 11/7/2026full-timeRemote • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application security testing and the implementation of security controls across applications and infrastructure. Proficient in using tools like Burp Suite DAST and Veracode, with a strong understanding of federal security standards such as NIST 800-53 and FedRAMP.

Highest-signal resume keywords

Burp Suite DASTJavaPythonNIST 800-53Static Application Security Testing (SAST)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Dynamic Application Security Testing (DAST)Enterprise-Wide Security ControlsLinuxUNIXVeracodeEclipseJDeveloperOWASP Top 10CVSSCWE

Tools & Technologies

Burp SuiteVeracodeCI/CD Pipelines

Certifications & Qualifications

Public Trust / Suitability

Industry Keywords

Federal Security StandardsFIPSFedRAMPSANS-25Application Security

Tech Stack

Tools & technologies

Cyber SecurityJavaLinuxPythonUnix.NET

About the role

Key responsibilities & impact

Act as a dedicated technical partner embedded within a federal financial regulatory agency’s application security team
Run the enterprise application security testing program using Burp Suite DAST (Enterprise)
Configure, schedule, and run dynamic application security scans, including authenticated scans across the application portfolio
Build and maintain scan integrations in development environments and CI/CD pipelines, including Eclipse, JDeveloper, and Veracode pipeline scanning
Navigate Linux/UNIX systems and troubleshoot basic website connectivity issues affecting scanning
Design and implement enterprise-wide security controls for applications, systems, networks, and infrastructure services
Map findings to OWASP Top 10, CVSS, CWE, WASC, and SANS-25
Align application security work to NIST 800-53, FIPS, and FedRAMP
Participate in a fully remote role supporting a federal government client
Travel minimally

Requirements

What you’ll need

6+ years of Information Technology experience, with experience in cybersecurity or application security
3+ years of experience with Java, Python, .NET, or C#
3+ years of experience using Burp Suite DAST to perform Dynamic Application Security Testing (DAST)
2+ years of experience with Static Application Security Testing (SAST), using tools such as Veracode
3+ years of experience designing and implementing enterprise-wide security controls to secure applications, systems, networks, or infrastructure services
3+ years of experience with Linux or UNIX environments, including system navigation and troubleshooting basic website connectivity issues
2+ years of experience with Veracode and development environments such as Eclipse or JDeveloper, including pipeline development and integration
Experience securing enterprise web applications and frameworks, including OWASP Top 10, CVSS, CWE, WASC, and SANS-25
Knowledge of federal security and compliance standards, including NIST 800-53, FIPS, or FedRAMP
Experience with Interactive Application Security Testing (IAST) capabilities and tools preferred
High school diploma or GED required; Bachelor’s Degree preferred
Experience can be substituted for education
Public Trust / Suitability; applicants selected will be subject to a security investigation
Must be a U.S. Citizen. No exceptions.
Availability during core hours approximately 7:30 AM–4:30 PM US Eastern Time, Monday through Friday
Expected 8.5-hour work day with a 30-minute break

Benefits

Comp & perks

Medical Insurance
Dental Insurance
Vision Insurance
Life Insurance
Short Term & Long Term Disability
401k Retirement Savings Plan with Company Match
Paid Holidays
Paid Time Off (PTO)
Tuition and Professional Development Assistance