Application Security Engineer

FAST FORWARD TO YOUR NEXT MISSION Integrity, confidence, discipline and commitment define your career in Battelle’s National Security Global Business. Battelle was built on a firm foundation of honesty, integrity, and outstanding service and the work we do in national security impacts lives around the world; whether we’re creating armor for military applications, testing a life-saving vaccine, or developing a more efficient hydrogen fuel cell. At Battelle, we reward the best work with more responsibility, positions to grow and develop, and the opportunity to make a positive impact on the world. Are YOU ready for your Next Mission? Job Summary

Battelle is a world leader in science and technology services and research. The Cyber Innovations Unit, Cyber Architecture & Advisory Services Practice of the National Security Global Business division specializes in providing advanced information assurance (IA) solutions to our government and commercial clients. The Cyber Architecture & Advisory Services is seeking an Application Security Engineer to work under the direction of an Application Security Subject Matter Expert (SME) in support of multiple DHS S&T Research, Development, & Innovation (RD&I) efforts. The Application Security Engineer will conduct Independent Verification and Validation (IV&V) of mission critical software applications protecting the homeland’s Land, Sea (Maritime), Air, Space, and Cyberspace domains. This quick fill position is located at DHS St. Elizabeth’s Campus, Washington DC, Battelle Crystal City Office, and remote locations. Compensation will be based on qualifications and experience. The selected candidate will be expected to travel up to 5% of the time.

Responsibilities

• Evaluate and analyze application software and firmware source code and binaries for exploitable weaknesses
• Utilize application security testing tools to identify potential vulnerabilities
• Conduct Static Application Security Testing (SAST) on source code repositories and executable binaries
• Research exploitation methods and develop exploits for identified vulnerabilities
• Write vulnerability remediation recommendations, including updates, source code corrections, or other mitigations
• Write in-depth software security reports that include summarized findings and describe the risks
• Present findings to software development teams
• Brief assessment results to senior leadership and executives

Other job responsibilities:

• Reverse engineer application software and firmware binaries when required under the guidance of the Senior Application Security Engineer
• Evaluate and analyze leading edge security technologies to be implemented to improve the organization’s security posture.
• Work with research and development (R&D) organizations to define requirements to design and develop leading-edge security solutions.
• Collaborate with fellow Cyber Security Practice Team Members both locally and across the Cyber Security Practice in the full-lifecycle development and delivery of security technology solutions.
• Actively contribute to the Battelle Cyber process improvement initiatives
• Actively participate in leading edge cyber security conferences, working groups and training

Key Qualifications

• Active DoD SECRET Clearance or DHS “Enter on Duty” (EOD) or “Full Suitability Approval” (FSA) Background Investigation status; US Citizenship required
• 5+ years software engineering experience with compiled and interpretive programming languages.
• 4+ years of experience in information assurance and/or cybersecurity
• Bachelors Degree (BS/BA)
• Experience with decompiling and reverse engineering tools such as Ghidra and JDecompiler
• Experience with SAST tools such as Black Duck Coverity
• Experience with software composition analysis tools such as Anchore Syft
• Familiarity with Software Bills of Materials (SBOMs)
• Experience with virtual machines
• Experience with common Linux distributions, such as Ubuntu and Red Hat
• Experience programming in Java, C/C++, C#/.NET, Python, and JavaScript
• Proven experience working in collaborative sessions demonstrating strong verbal and written communication skills along with tactful negotiation skills Certified Information Systems Professional (CISSP)

Preferred Qualifications

• Current DHS Security Suitability
• M.S. in Information Systems or related field
• Certified Secure Software Lifecycle Professional (CSSLP)
• Experience with Ruby, Rust, Go, TypeScript, and PHP
• Experience with Continuous Integration / Continuous Development (CI /CD) Pipelines
• Penetration Testing experience and/or certifications
• Experience with C-UAS, Sea (Maritime), Air, and/or Border operations and DHS systems
• Experience with IT Security Engineering in support of systems development, interface, and/or architecture requirements and concepts
• Familiarity with MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) Framework
• Familiarity with NIST SP 800-53 Rev. 5
• Familiarity with DHS 4300A
• Experience with cloud application security
• Experience with cloud environment operations
• Consulting environment experience
• Military veteran with relevant Application Security, IT and computer security experience will be considered a plus.

Compensation Data

Battelle is committed to fair and equitable compensation practices. The salary range for this role is $130,000 – $190,000 per year, in addition to our comprehensive benefits package. A candidate's salary is determined by various factors, including but not limited to education, relevant work experience, skills, and certifications. Salary ranges may vary based on geographic location and market conditions.

Benefits: Live an Extraordinary Life We care about your well-being, not just on the job. Battelle offers comprehensive and competitive benefits to help you live your best life.

• Balance life through a compressed work schedule: Most of our team follows a flexible, compressed work schedule that allows for every other Friday off - giving you a dedicated day to accomplish things in your personal life without using vacation time.
• Enjoy enhanced work flexibility, including a hybrid arrangement: You have options for where and when you work. Our Together with Flexibility model allows you to work 60% in-office and 40% remote, with Monday and Tuesday as common in-office days, dependent on team and position needs.
• Take time to recharge: You get paid time off to support work-life balance and keep motivated.
• Prioritize wellness: Stay healthy with medical, dental, and vision coverage with wellness incentives and benefits plus a variety of optional supplemental benefits.
• Better together: Coverage for partners, gender-affirming care and health support, and family formation support.
• Build your financial future: Build financial stability with an industry-leading 401(k) retirement savings plan. For most employees, we put in 5 percent whether you contribute or not, and match your contributions on top of that.
• Advance your education: Tuition assistance is available to pursue higher education.

A Work Environment Where You Succeed For brilliant minds in science, technology, engineering and business operations, Battelle is the place to do the greatest good by solving humanity’s most pressing challenges and creating a safer, healthier and more secure world.

You will have the opportunity to thrive in a culture that inspires you to:

• Apply your talent to challenging and meaningful projects
• Receive select funding to pursue ideas in scientific and technological discovery
• Partner with world-class experts in a collaborative environment
• Nurture and develop the next generation of scientific leaders
• Give back to and improve our communities

Vaccinations & Safety Protocols Battelle may require employees, based on job duties, work location, and/or its clients’ requirements to follow certain safety protocols and to be vaccinated against a variety of viruses, bacteria, and diseases as a condition of employment and continued employment and to provide documentation that they are fully vaccinated. If applicable, Battelle will provide reasonable accommodations based on a qualified disability or medical condition through the Americans with Disabilities Act or the Rehabilitation Act or for a sincerely held religious belief under Title VII of the Civil Rights Act of 1964 (and related state laws). Battelle is an equal opportunity employer. We provide employment and opportunities for advancement, compensation, training, and growth according to individual merit, without regard to race, color, religion, sex (including pregnancy), national origin, sexual orientation, gender identity or expression, marital status, age, genetic information, disability, veteran-status veteran or military status, or any other characteristic protected under applicable Federal, state, or local law. Our goal is for each staff member to have the opportunity to grow to the limits of their abilities and to achieve personal and organizational objectives. We will support positive programs for equal treatment of all staff and full utilization of all qualified employees at all levels within Battelle. The above statements are intended to describe the nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all responsibilities, activities and skills required of staff members. No statement herein is intended to imply any authorities to commit Battelle unless special written permission is granted by Battelle's Legal Department.

For more information about our other openings, please visit www.battelle.org/careers