Apply on Employer Site

Unisys · 5 hours ago

Senior Application Security Engineer

Rockville, MD

Contract

Hybrid

Senior Level, Lead/Staff

5+ years exp

Unisys is looking for a Senior Application Security Engineer to lead application security initiatives. The role involves designing security controls for cloud environments, implementing application security tools, and ensuring secure software development practices.

Enterprise SoftwareSoftwareProfessional ServicesInformation TechnologyBusiness DevelopmentInformation ServicesManagement Information Systems

H1B Sponsor Likely

Hiring Manager

Venkata Ramana Reddy G

Responsibilities

5+ years of experience in application security, with at least 2 years in security architecture roles

Deep knowledge of secure design principles, threat modeling methodologies, and security patterns

Experience designing security controls for cloud environments (AWS, Azure, GCP)

Proficiency in evaluating and implementing application security tools (SAST, DAST, IAST, SCA)

Hands-on experience with security testing tools such as Burp Suite, OWASP ZAP, and other proxy tools

Experience with secure software development practices and DevSecOps implementation

Strong understanding of OWASP Top 10, SANS CWE, and other security standards

Knowledge of secure authentication mechanisms (MFA, SSO, OAuth 2.0, SAML, OIDC)

Experience with secure API design and implementation of API security controls

Knowledge of regulatory requirements (PCI-DSS, GDPR, SOX, etc.) and their architectural implications

Experience with containerization, microservices, and API security

Proficiency in one or more programming languages (Java, Python, JavaScript preferred)

Experience with secure code review techniques and identifying common vulnerability patterns

Knowledge of cryptographic protocols and implementations

Experience with security requirements for modern application architectures (SPA, serverless, etc.)

Excellent communication skills with ability to translate complex security concepts to technical and non-technical audiences

Experience leading cross-functional security initiatives and influencing stakeholders

Certifications such as CSSLP, CISSP, AWS Security Specialty are highly desirable

Cloud (any)

Bonus: GenAI, Gitlab (we are moving to Gitlab)

Qualification

Application security experienceSecurity architecture experienceCloud security controlsApplication security toolsSecure software developmentOWASP Top 10 knowledgeSecure authentication mechanismsAPI security designRegulatory requirements knowledgeProgramming languages proficiencyCertifications CSSLPCertifications CISSPContainerization knowledgeCryptographic protocols knowledgeGenAI knowledgeGitlab proficiencyCommunication skillsCross-functional leadership

Required