Application Security Analyst

Booz Allen Hamilton

Confirmed live today High trust

Quick summary

Work type
On-site
Location
McLean, VA
Salary
$86,800–$198,000 / yr
Employment
Full-time
Posted
5 days ago
Freshness
Confirmed live today
Nearby
99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $157k
This role $142k
$73k $211k
below market most similar roles pay here above market

This role pays less than 58% of similar roles. Most pay $121,831–$191,837 — the blue band above. At the midpoint, this role pays about $142k versus about $157k for comparable roles.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 1662 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 904 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · Application Security Analyst

Role Posting Log in to save

JOB TITLE: Application Security Analyst The Application Security Analyst joins the internal Enterprise Cybersecurity team to manage application security vulnerabilities. This role involves leveraging Static Application Security Testing tools to identify and remediate code-level vulnerabilities while conducting web application scanning for internal and client-facing systems. The analyst will collaborate with development teams to integrate security into the software development lifecycle and promote secure coding practices. Key responsibilities include triaging vulnerabilities based on risk, providing metrics to leadership, and performing direct outreach for rapid remediation. Required skills include experience with SAST, secret scanning, and open-source library dependency scanning, alongside knowledge of OWASP Top 10 and DevSecOps. The role operates within a Cyber Fusion Center environment to address application security threats and risks to the global enterprise.

Skills

SAST DAST IAST DevSecOps CI/CD OWASP Top 10 AWS Azure Google Cloud Platform Kubernetes Python Java C# JavaScript GitHub Selenium Threat Modeling Secret Scanning

What you'll do

  • Manage application security vulnerabilities using Static Application Security Testing (SAST) tools.
  • Conduct web application scanning to detect security weaknesses in internal and client-facing applications.
  • Integrate security into the software development lifecycle (SDLC) and promote secure coding practices.
  • Perform direct outreach to development teams to ensure rapid remediation of critical findings.
  • Triage and prioritize vulnerabilities based on risk and business impact.
  • Provide metrics and KPIs to operational teams and senior leadership for the Attack Surface Management team.
  • Analyze the impact of application vulnerabilities and risks within a Cyber Fusion Center environment.

What we're looking for

  • U.S. citizenship is required.
  • 4+ years of experience in application security, including vulnerability assessment and remediation.
  • Experience with SAST, secret scanning, and open-source library dependency vulnerability scanning tools.
  • Knowledge of secure coding practices, common application vulnerabilities (OWASP Top 10), SDLC, and DevSecOps principles.
  • Associate's degree with 7+ years of IT experience, Bachelor's with 5+ years, Master's with 3+ years, or 10+ years of IT experience.
  • Ability to triage and prioritize vulnerabilities based on risk and business impact.
  • Experience integrating security tools into CI/CD pipelines (preferred).
  • Experience with Selenium, DAST, IAST, cloud security (AWS/Azure/GCP), GitHub, or programming languages (preferred).

Related searches

More Application Security Analyst jobs Application Security Analyst jobs in McLean All jobs at Booz Allen Hamilton

More like this

Similar roles

Application Security Engineer

Booz Allen Hamilton

Fort Meade, MD +8 42 days ago $99,000–$225,000
Zero Trust Palo Alto Versa Cisco Fortinet Juniper TLS mTLS PKI F5 Nginx A10 NetScaler DMZ Office 365 NIST 800-53 FIPS DoD STIG FedRAMP
Save

Senior Application Security Architect

State Street

Quincy, MA +4 110 days ago $120,000–$202,500
Application Security AI Security Kubernetes DevSecOps CI/CD Infrastructure as Code SAST DAST IAST Software Composition Analysis Threat Modeling Zero Trust API Security OWASP Top 10 RAG Cloud-Native Containers SaaS SSDLC
10+ yrs exp Hybrid
Save

Application Analyst

Abbott

Madison, WI 33 days ago $61,300–$122,700
Epic Epic Prelude Epic Identity Epic Eligibility RTE Microsoft Office Business Systems Design Configuration Workflow Design Technical Documentation Issue Tracking Systems Impact Analysis
3+ yrs exp
Save

Application Analyst

Abbott

Madison, WI 33 days ago $61,300–$122,700
Epic Cheers MyChart Care Everywhere Agile Microsoft Office Business Systems Design Configuration Technical Documentation Issue Tracking Systems Workflow Design Impact Analysis Production Support
3+ yrs exp
Save

Application Analyst

Abbott

Madison, WI 32 days ago $61,300–$122,700
Epic Epic Prelude Epic Identity Epic Eligibility RTE Microsoft Office Business Systems Design Configuration Workflow Design Technical Documentation Issue Tracking Systems Impact Analysis Quality Management System
3+ yrs exp
Save

Application Analyst

Abbott

Madison, WI 20 days ago $61,300–$122,700
Epic Cheers MyChart Care Everywhere Agile Microsoft Office Business Systems Design Configuration Technical Documentation Issue Tracking Systems Workflow Design Impact Analysis Production Support
3+ yrs exp
Save