Company OverviewFor over 25 years, Edgesource Corporation has served as an innovative technology service provider for the Department of Defense (DOD), Department of Homeland Security (DHS), Department of State (DOS), the U.S. Intelligence Community, Law Enforcement, and other federal, state, and commercial clients locally, nationally, and abroad. From providing boutique technical solutions in support of the DOD Counter Unmanned Aerial Systems (CUAS) mission set to addressing the most critical Cybersecurity threats facing our nation as a prime contractor with the DHS Cybersecurity & Infrastructure Security Agency (CISA), a career at Edgesource is an opportunity to do meaningful, interesting, and impactful work.Position OverviewThe Application Security Engineer (SME I) supports the security, integrity, and compliance of enterprise applications, systems, and services across customer environments. This role applies strong foundational expertise in secure coding, threat modeling, and vulnerability management, while assisting in embedding security into CI/CD pipelines and leveraging automation and RPA tools to scale security processes. The SME I partners with senior engineers to help drive adoption of security best practices across different teams.Job DutiesSupport the design and implementation of secure application architectures under guidance from senior engineers.Apply secure coding practices and assist in threat modeling and vulnerability assessments.Conduct and support application security testing (SAST, DAST, SCA, and manual reviews).Assist in integrating security controls into CI/CD pipelines, including automated testing and scanning.Leverage automation and RPA tools to improve efficiency in vulnerability tracking, reporting, and remediation workflows.Support implementation of security controls and policy gates aligned with organizational standards.Participate in the vulnerability management lifecycle, including identification, triage, and remediation tracking.Required QualificationsMust be able to obtain and maintain a favorable contractor fitness determination.3–5 years of experience in application security, software development, or cybersecurity engineeringFoundational knowledge of secure coding practices, OWASP Top 10, and threat modeling conceptsExperience with application security testing tools (SAST, DAST, SCA, or similar)Familiarity with CI/CD pipelines and DevSecOps practicesExposure to or basic experience with RPA tools (UiPath, Automation Anywhere, or similar)Understanding of vulnerability management processes and toolsConducts vulnerability assessments.Strong analytical and problem-solving skillsNice to Have QualificationsFamiliarity with federal security frameworks (NIST, FISMA, Zero Trust principles)Familiarity with software supply chain / component risk tooling such as NexusIQ.Familiarity with code quality/security tooling such as SonarQube (and using results to drive remediation and policy gates)Working at EdgesourceAs an ISO 9001:2015 certified and CMMI Level 3 appraised small business, Edgesource specializes in providing a variety of technical solutions to include software development, database services, enterprise networking, data center virtualization, and management support. We are always seeking top-talent to join our team in helping to address the most critical technical challenges facing our nation.At Edgesource, we understand that our employees are our greatest asset, and as such we offer a wide array of benefits to support the well-being of our staff to include:Flexible PTO Policy + 11 Paid HolidaysFlexible Work Schedules (Remote / Hybrid)Medical / Dental / Vision / Flexible Spending Account (FSA)401k Plan with MatchTuition & Professional Development SupportCommuter BenefitsBonus & Employee Referral ProgramsCareer Growth Opportunities
