Application Security Engineer (2026-0248)
About The Position
Acclaim Technical Services (ATS) is seeking a highly experienced and motivated Application Security Engineer for a new contract in Bethesda, Maryland. The role is part of a team of data, cloud, and security engineers delivering a cloud-native, centralized platform that provides end-to-end budget traceability. The engineer will integrate security throughout the software development lifecycle and partner with developers and cloud engineers to design, build, assess, and sustain secure mission applications. The role applies application security, secure software development, software engineering, and DevSecOps expertise to Oracle Cloud and customer mission challenges. Work includes secure design and architecture reviews, threat modeling, secure code review, application and cloud security testing, vulnerability remediation, and release authorization support. The engineer will help build and secure cloud-native applications and services, implement automated security controls in CI/CD pipelines, and evaluate and communicate risks and remediation recommendations to technical and non-technical stakeholders. ATS is an employee-owned company that describes its culture as emphasizing ownership, accountability, and shared success. The posting cites competitive compensation, career growth, learning and development opportunities, and a comprehensive benefits package covering healthcare, wellness, financial and retirement support, family support, continuing education, and time off.
Requirements
- At least 8 years of relevant experience in application security, software engineering, DevSecOps, cybersecurity, or a related technical discipline.
- Bachelor’s degree in engineering, computer science, or a related technical discipline.
- Active or required TS/SCI with Polygraph clearance, as indicated in the posting title description.
- Hands-on technical expertise in application security, secure software development, software engineering, or DevSecOps, applied to Oracle Cloud and customer mission challenges.
- Experience developing or reviewing applications using Python, JavaScript frameworks, SQL, Shell scripting, PL/SQL, and other programming languages.
- Strong understanding of common application vulnerabilities and secure coding practices.
- Experience with SAST, DAST, software composition analysis, secrets scanning, and container or infrastructure vulnerability scanning.
- Experience building and securing cloud-native applications and services using Kubernetes, containers, Docker, REST APIs, and CI/CD pipelines.
- Experience implementing automated security controls and testing within build and deployment pipelines.
- Knowledge of security frameworks and standards such as NIST RMF, NIST Secure Software Development Framework, OWASP, DISA STIGs, and applicable federal security requirements.
- Experience securing Oracle RDBMS environments, including database access controls, encryption, auditing, and secure handling of sensitive data.
- Ability to assess, prioritize, document, and communicate security risks, findings, and remediation recommendations to technical and non-technical stakeholders.
- Experience working in an Agile framework.
- Passion for technology, curiosity, and willingness to continuously learn new security tools, techniques, and approaches.
Nice To Haves
- Oracle Cloud Infrastructure (OCI) IaaS and/or PaaS certifications.
- Security certifications such as CISSP, CSSLP, Security+, GIAC, CEH, OSCP, or comparable credentials.
- Experience implementing identity and access management, privileged access controls, secrets management, encryption, logging, monitoring, and incident response in cloud environments.
- Experience with AI technologies for software development and securing AI-enabled applications or development workflows.
- Data engineering experience, including securing data validations, business rules, data transformations, and sensitive-data handling.
- Master’s degree.
Responsibilities
- Integrate security throughout the software development lifecycle, including secure design and architecture reviews, threat modeling, secure code review, security testing, vulnerability remediation, and release authorization support.
- Develop or review applications and apply secure coding practices across relevant programming languages and frameworks.
- Use application security testing processes and tools, including SAST, DAST, software composition analysis, secrets scanning, and container or infrastructure vulnerability scanning.
- Build and secure cloud-native applications and services using Kubernetes, containers, Docker, REST APIs, and CI/CD pipelines.
- Implement DevSecOps practices, including automated security controls and testing in build and deployment pipelines.
- Apply cloud-native security services and controls to mission applications.
- Secure Oracle RDBMS environments, including database access controls, encryption, auditing, and sensitive-data handling.
- Assess, prioritize, document, and communicate application and cloud security risks, findings, and remediation recommendations to technical and non-technical stakeholders.
- Partner with developers and cloud engineers to design, build, assess, and sustain secure mission applications.
- Continuously learn new security tools, techniques, and approaches and work within an Agile framework.
Benefits
- Comprehensive benefits package, including healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.
- Career growth opportunities.
- Learning and development opportunities.
- Employee ownership through an Employee Stock Ownership Plan (ESOP).
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
