• Support and operate application security testing capabilities across SAST, DAST and IDE plug-in environments, with primary focus on Burp Suite and Veracode. • Configure, maintain and troubleshoot Burp Suite and Veracode integrations to enable consistent application security testing workflows. • Partner with development and engineering teams to identify, validate and remediate security vulnerabilities. • Apply vulnerability standards and scoring methodologies to findings, including OWASP Top 10, CVSS, CWE, WASC and SANS-25. • Navigate and troubleshoot within Linux or UNIX environments, including basic website connectivity issues. • Support the design and implementation of enterprise-wide security controls that secure applications, systems, networks or infrastructure services. • Use IDEs and development toolchains (Eclipse, JDeveloper, Visual Studio) to support developer workflows, including pipeline development activities where applicable. • Support compliance-aligned security activities in federal environments leveraging NIST 800-53, FIPS and/or FedRAMP standards.