Application Security Engineer Jobs

About The Position

Requirements

• Strong background in application security, including secure development practices, vulnerability analysis, and secure design principles.
• Knowledge of SAST, DAST, SCA, and CI/CD security integration.
• Proficiency with secure coding techniques in one or more languages, such as Python, Java, C#, JavaScript/TypeScript, or Go.
• Experience reviewing application architectures, microservices, and containerized workloads for security weaknesses.
• Familiarity with NIST 800-53 or similar control frameworks as they relate to application-level security requirements.
• Strong understanding of authentication, authorization, encryption, and API security best practices.
• Strong background in cybersecurity disciplines, including vulnerability management, scanning, compliance evaluation, and control implementation.
• Experience interpreting security policy, generating evidence, and documenting test results for NIST 800-53 / JSIG security controls.
• Active TS/SCI clearance.
• Bachelor’s degree and 3+ years of relevant experience, or an equivalent combination of education and experience.
• Must be a U.S. citizen and eligible to obtain a government security clearance.
• Must successfully complete required background check(s), participate in the ARL drug testing program, and comply with electronic and physical monitoring requirements applicable to federal contractors.

Nice To Haves

• Experience operating within DevSecOps pipelines and modern CI/CD ecosystems.
• Knowledge of cloud-native application security in AWS, Azure, or DoD cloud environments.
• Experience with secure design reviews for APIs, distributed systems, mobile applications, or cross-domain solutions.
• Background with eMASS, STIGs, or ACAS in support of application accreditation efforts.
• Relevant certifications such as CSSLP, GWAPT, GWEB, GCSA, GSSP, or CISSP.
• Prior experience delivering developer security training or building secure coding programs.

Responsibilities

• Lead integration of application security best practices into Agile and DevSecOps workflows, incorporating security requirements from initial design through deployment.
• Conduct secure code reviews, threat modeling, and architecture analysis to identify vulnerabilities and guide remediation.
• Perform static (SAST), dynamic (DAST), and interactive application security testing across microservices, APIs, and containerized applications.
• Develop and maintain secure coding standards, patterns, and guidance for engineering teams.
• Partner with developers and product owners on secure design decisions, including least privilege, secure defaults, zero-trust principles, and defense-in-depth.
• Manage and optimize application-security tools, including SAST/DAST platforms, software composition analysis, secret scanning, and container and CI-pipeline security tools.
• Evaluate open-source and third-party components for vulnerabilities, license risks, and supply-chain integrity.
• Guide teams in secure API development, authentication and authorization practices, cryptographic use, and secure data handling.
• Validate security controls and perform risk analysis for applications undergoing release, modernization, or cloud migration.
• Support a security-focused engineering culture through training, documentation, and hands-on engagement with developers.
• Collaborate with cybersecurity, cloud, and network teams to align application security with enterprise risk, RMF requirements, and mission objectives.
• For senior-level roles, potentially lead threat-modeling sessions, red/blue-team collaboration, and advanced vulnerability analysis; design scalable application-security programs and enterprise SDLC security strategies; support RMF documentation and application-level security artifacts; and advise on high-visibility or mission-critical applications.
• Travel periodically to local and remote test sites.

Benefits

• Comprehensive medical, dental, and vision coverage.
• Retirement plans.
• Paid holidays, vacation, and sick time.
• 75% tuition discount for employees and eligible spouses and children.