# Application Security Engineer

**Company**: Leidos
**Location**: Omaha, NE
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $87,100.00 - $157,450.00
**Category**: Security
**Industry**: Technology

**Apply**: https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Omaha-NE/Application-Security-Engineer_R-00196495?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/application-security-engineer-c3e169fd-76e/

## Description

The Defense Sector at Leidos is seeking a talented Application Security Engineer to join our dynamic Agile software teams in Omaha, Nebraska.

In this role, you will have significant experience in building modern JavaScript-based web applications, including familiarity with multiple frameworks, strong programming fundamentals, and typical web application development and deployment processes, as well as cybersecurity experience.

**Primary Responsibilities:**

- Independently evaluate software dependencies, assess risk, approve or reject components, and document defensible technical decisions.

- Apply your knowledge of SBOMs, transitive dependencies, component provenance, vulnerability intelligence, and artifact integrity in order to improve software supply chain security.

- Evaluate vulnerabilities in the context of actual application use, rather than relying solely on automated scan results or CVSS scores.

- Work directly with software engineers and DevSecOps teams to resolve security findings without unnecessarily impeding development velocity.

- Use Jira, Confluence, Nexus, Git, development operations, collaboration, and source control tools.

- Support creation and updating of all relevant documentation and specifications for design, development, and testing.

**Basic Qualifications:**

- US Citizen with the ability to obtain and maintain a TS/SCI within 365 days of your start date with Leidos.

- Bachelor’s degree with 4+ years of experience or a Master’s degree with 2+ years of experience.

- Experience performing application security assessments, vulnerability analysis, and security risk evaluations across enterprise software applications and development environments.

- Experience evaluating and adjudicating third-party software libraries, open-source components, and external dependencies for security vulnerabilities, licensing concerns, and software supply chain risks.

- Working knowledge of Software Composition Analysis (SCA), Static Application Security Testing (SAST), and Dynamic Application Security Testing (DAST) methodologies and tools.

**Preferred Qualifications:**

- US Citizen with an active TS/SCI security clearance.

- Experience supporting application security activities within DoD, Intelligence Community, or other highly regulated and security-sensitive software development environments.

- Experience with modern software development (Java, Python, Javascript, Rust, etc).

- Experience implementing or managing third-party library approval and adjudication processes.

- Hands-on experience with SCA and vulnerability management tools.

**Pay Range:** $87,100.00 - $157,450.00

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- JavaScript
- cybersecurity
- Software Composition Analysis
- Static Application Security Testing
- Dynamic Application Security Testing
- SBOMs
- transitive dependencies
- component provenance
- vulnerability intelligence
- artifact integrity

### Nice to have
- TS/SCI security clearance
- DoD
- Intelligence Community
- modern software development
- third-party library approval
- SCA and vulnerability management tools

---

Source: [Apply at leidos.wd5.myworkdayjobs.com](https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Omaha-NE/Application-Security-Engineer_R-00196495?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)