The Department of Homeland Security (DHS), Customs and Border Protection (CBP) Cyber Security Directorate (CSD) Security Operations Center (SOC) is a US Government program responsible to prevent, identify, contain and eradicate cyber threats to CBP networks through monitoring, intrusion detection and protective security services to CBP information systems including local area networks/wide area networks (LAN/WAN), commercial Internet connection, public facing websites, wireless, mobile/cellular, cloud, security devices, servers and workstations. The CBP SOC is responsible for the overall security of CBP Enterprise-wide information systems, and collects, investigates, and reports any suspected and confirmed security violations.

Primary Responsibilities

Leidos is looking for an Application Security Engineer to support:

Application Security Operations and Maintenance, Application Security Configuration Management and Application Security Logging and Vulnerability Management :

• Ensure continuous monitoring of all CSD managed applications and implement an alerting system for critical incidents
• Participate in market research to identify new security solutions as required to avoid obsolescence and to improve the overall security posture
• Develop, deploy, maintain, and/or assist in the implementation and integration of Machine Learning (ML) and Artificial Intelligence (AI) into CBP’s security tool suite.
• Integrate security best practices into the software development life cycle (SDLC) and ensure security is embedded from design to deployment.
• Utilize SAST tools to analyze source code for vulnerabilities.
• Work closely with development teams and ISSOs to remediate identified security issues.
• Conduct security assessments using Microfocus WebInspect and other DAST tools.
• Collaborate with development teams to address and remediate dynamic security findings.
• Implement and manage container security tools, with a focus on Anchore, to ensure secure container deployments.
• Provide recommendations for secure container orchestration.
• Work on ensuring systems and applications comply with Security Technical Implementation Guide
• Establish and maintain the definitive current basis for control and status accounting of application systems and their configuration items.
• Select configuration items at appropriate levels for application products to facilitate documentation, control
• Tune logging capabilities for efficiency, identify shortfalls, and recommend improvements and new technologies for application logging.