Application Security Engineer needed in the DC area

USAC, a dynamic not-for-profit company in downtown DC, has an outstanding opportunity for a regular full-time position of Application Security Engineer. The purpose of this position is to implement, maintain, and monitor IT security measures utilized by USAC.  It will entail work on existing systems and supporting a variety or new IT initiatives.

 

The successful candidate will have:

 

? 4 years or more of direct work experience in Information Technology;

? Bachelors degree in Information Technology from an accredited college or university or equivalent work experience is required;

? 3 years or more demonstrated knowledge of application development security concerns and the ability to define and test application security requirements;  

? 3 years or more demonstrated knowledge of Software Development Life Cycle framework;

? 3 years or more IT security knowledge and implementation experience (e.g. firewalls, secure topologies/architectures, intrusion detection and analysis, Microsoft and UNIX OS security, vulnerability assessments);

? 2 years or more experience with IT Security policy and standards development;

? 3 years or more of working systems administration knowledge of Unix and Microsoft operating systems;

? Experience with Application Firewall Architecture and Deployment desired;

? Experience with Application security assessment tools (e.g. WebInspect) desired;

? Experience with Federal Security Regulations, Guidelines,  and Trends (e.g. OMB Circular A-130, NIST Guidelines) desired;

? Experience with Incident Response/Computer Forensics Experience desired;

? Experience with Perl and/or shell scripting desired;

? Technical training in IT/IT Security a plus.

 

 

Responsibilities include:

 

? Responsible for customer support of application security within business initiatives. (e.g. security analysis projects, vulnerability and risk assessments of USAC developed applications);

? Maintain post assessment process of existing applications and provide recommendations to mitigate potential security risks;

? Respond to day-to-day IT operations and internal requirements requiring security support (e.g. audit assessment support, disaster recover and business continuity);

? Perform security initiative assessments;

? Collaborate closely with the application development group;

? Implement, test, and maintain defined security solutions;

? Define desired state for people, process, and technology solutions that are to be utilized to support other IT efforts.

 

 

Competitive salary, with excellent benefits package.  If interested, please submit a letter of interest, resume and salary requirements to jobs@universalservice.org Can also fax to 202-777-0293 or mail to HR, 2000 L Street, NW, Suite 200, Washington, DC  20036

 

Only principals will be accepted.  No agencies please.  EOE