Senior Application Security Engineer
External job listingat Hyperion Technologies
HYP-4293 Product Owner Location: Washington, DC Employment Type: W2 Only Salary: DOE Only W2 Job Requirements: Proven experience as a Product Owner in an enterprise Agile environment. Exp...
Salary
Not provided
Location
Washington, United States
Employment type
Full time
Workplace
Not provided
Senior Application Security Engineer
Washington, United States
Job description
HYP-4293 Product Owner
Location: Washington, DC
Employment Type: W2 Only
Salary: DOE Only W2
Job Requirements:
Proven experience as a Product Owner in an enterprise Agile environment.
Expertise in product backlog management, prioritization, user stories, acceptance criteria, and Definition of Done (DoD).
Hands-on experience with Azure DevOps (ADO) for backlog management, sprint tracking, reporting, and delivery metrics.
Strong knowledge of Agile, Scrum, Kanban, and SAFe methodologies.
Experience in product strategy, vision, roadmap planning, and requirements gathering.
Ability to lead sprint planning, backlog refinement, sprint reviews, and retrospectives.
Experience in stakeholder management, cross-team dependencies, and cross-functional collaboration.
Knowledge of KPIs, product performance, quality, delivery metrics, and continuous improvement.
Strong analytical, communication, problem-solving, and decision-making skills.
Ability to prioritize high-value features and ensure timely delivery aligned with business objectives.
HYP-4294 Senior Application Security Engineer
Location: Washington, DC
Salary: DOE Only W2
Required Qualifications:
Bachelor's/Master's degree in Computer Science, Cybersecurity, IT, or related field, or equivalent experience.
10+ years of experience in Application Security, Security Testing, or Vulnerability Management.
Strong hands-on experience with SAST, DAST, SCA, penetration testing, API security testing, and manual security assessments.
Extensive experience with Burp Suite, HCL AppScan, Sonatype Nexus IQ/Lifecycle, Fortify, SonarQube, and Black Duck or similar tools.
Strong knowledge of OWASP Top 10, CWE, OWASP ASVS, Secure SDLC, vulnerability management, and risk-based prioritization.
Experience in vulnerability remediation, secure coding guidance, DevSecOps, CI/CD security integration, threat modeling, and security compliance.
Strong reporting, documentation, stakeholder communication, and collaboration skills.
Preferred Skills:
Azure C