Application Security Engineer

The Defense Sector at Leidos is seeking a talented Application Security Engineer to join our dynamic Agile software teams in Omaha, Nebraska.

In this role, you will have significant experience in building modern JavaScript-based web applications, including familiarity with multiple frameworks, strong programming fundamentals, and typical web application development and deployment processes, as well as cybersecurity experience.

Primary Responsibilities:

• Independently evaluate software dependencies, assess risk, approve or reject components, and document defensible technical decisions.
• Apply your knowledge of SBOMs, transitive dependencies, component provenance, vulnerability intelligence, and artifact integrity in order to improve software supply chain security.
• Evaluate vulnerabilities in the context of actual application use, rather than relying solely on automated scan results or CVSS scores.
• Work directly with software engineers and DevSecOps teams to resolve security findings without unnecessarily impeding development velocity.
• Use Jira, Confluence, Nexus, Git, development operations, collaboration, and source control tools.
• Support creation and updating of all relevant documentation and specifications for design, development, and testing.

Basic Qualifications:

• US Citizen with the ability to obtain and maintain a TS/SCI within 365 days of your start date with Leidos.
• Bachelor’s degree with 4+ years of experience or a Master’s degree with 2+ years of experience.
• Experience performing application security assessments, vulnerability analysis, and security risk evaluations across enterprise software applications and development environments.
• Experience evaluating and adjudicating third-party software libraries, open-source components, and external dependencies for security vulnerabilities, licensing concerns, and software supply chain risks.
• Working knowledge of Software Composition Analysis (SCA), Static Application Security Testing (SAST), and Dynamic Application Security Testing (DAST) methodologies and tools.

Preferred Qualifications:

• US Citizen with an active TS/SCI security clearance.
• Experience supporting application security activities within DoD, Intelligence Community, or other highly regulated and security-sensitive software development environments.
• Experience with modern software development (Java, Python, Javascript, Rust, etc).
• Experience implementing or managing third-party library approval and adjudication processes.
• Hands-on experience with SCA and vulnerability management tools.

Pay Range: $87,100.00 - $157,450.00