Application Security Engineer
About The Position
Accenture Federal Services is seeking a Senior Application Security Engineer to partner with development teams and support secure, scalable software delivery. The role leads the AppSec scrum team, integrates security into the software development lifecycle, and designs processes that help developers work securely and efficiently. It requires hands-on engineering experience and a strong understanding of modern application security. The engineer tests and triages vulnerabilities in web and AI applications, provides actionable remediation guidance, and architects and maintains secure CI/CD pipelines. The role leads shift-left threat modeling, integrates security tools into developer workflows, and supports secure supply-chain practices, including SBOM management and artifact verification and signing. It also balances security requirements with delivery velocity in a federal environment and uses AI tools to improve team workflows.
Requirements
- At least 6 years of experience in software engineering and application or infrastructure security.
- Hands-on production coding experience.
- Proven experience securing CI/CD pipelines.
- Foundational understanding of one or more build systems, such as Gradle, Maven, Docker, or Kubernetes.
- Experience with SBOM formats such as CycloneDX or SPDX.
- Strong understanding of application security principles, SSDF, threat modeling, and secrets management.
- Must be a US citizen.
- Must be eligible to obtain a Public Trust clearance.
Nice To Haves
- Experience with artifact signing, such as Sigstore or Cosign.
Responsibilities
- Lead the AppSec scrum team and facilitate agile ceremonies.
- Prioritize the security backlog and guide teammates on best practices.
- Drive collaboration across security, development, and operations.
- Use AI tools to improve team workflows and efficiency.
- Test and triage security vulnerabilities in web and AI applications.
- Provide clear, actionable vulnerability remediation guidance.
- Architect and maintain secure CI/CD pipelines using GitLab and Jenkins.
- Implement hardened build processes and secure supply-chain practices, including SBOM management.
- Lead shift-left threat modeling and partner with engineers to address risks early.
- Ensure AI agents and pipelines follow secure design principles.
- Integrate security tools such as Snyk, Nexus, and JFrog into developer workflows.
- Manage dependency lifecycles and ensure artifacts are verified and signed.
- Balance security needs with delivery velocity in a federal environment.
- Navigate technical and organizational gray areas effectively.
Benefits
- The company offers benefits, with further information available through its benefits resources.
- Hands-on experience, certifications, and industry training.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
