10 application security engineer jobs at 5 companies in Danville, VA

PromotedHiringCafe
Founding Backend / Infra Engineer
Cupertino, CA, US
$160k-$300k/yr On-SiteFull Time
HiringCafe
HiringCafe: Building a 100× better job search engine to take on Indeed and LinkedIn.
Own the crawlers, pipelines, and infrastructure powering a real-time job search engine. Strong Node.js and Python fundamentals; bonus points for security and reverse-engineering chops.
Node.js, Python, Elasticsearch, Redis
3mo
Save
Mark Applied
Hide
Senior Application Security Engineer
Spring or Durham or Alpharetta or Fort Collins
$106k-$243k/yr HybridFull Time
Hewlett Packard Enterprise
Hewlett Packard EnterpriseNYSE: HPE: Providing global edge-to-cloud infrastructure and IT solutions for businesses.
5+ YOE5–8+ years in application security; CI/CD security; SBOM/NIST/SSDF knowledge; secrets management; WAF and API security; SAST/DAST/SCA; cloud security; programming in Python/Java/Go/Node.js.
GitHub, GitLab, Jenkins, Sigstore, Cosign, WAF, SAST, DAST, SCA, container scanning, AWS, Azure, GCP, Python, Java, Go, JavaScript
3mo
Save
Mark Applied
Hide
Senior Application Security Engineer
Spring or Durham or Alpharetta or Fort Collins
$112k-$212k/yr HybridFull Time
Hewlett Packard Enterprise
Hewlett Packard EnterpriseNYSE: HPE: Provides edge-to-cloud IT infrastructure and platform services.
5+ YOE5–8+ years in application security; secure CI/CD pipelines; SLSA/NIST SSDF; secrets management; WAF; API security; SAST/DAST/SCA; cloud security; programming languages (Python/Java/Go/Node.js).
GitHub, GitLab, Jenkins, Sigstore, Cosign, SAST, DAST, SCA, WAF, OWASP, MITRE ATLAS, Cloud security (AWS/Azure/GCP)
3mo
Save
Mark Applied
Hide
Senior Application Security Engineer
Spring or Durham or Alpharetta or Fort Collins
$112k-$243k/yr HybridFull Time
Hewlett Packard Enterprise
Hewlett Packard EnterpriseNYSE: HPE: Provides global edge-to-cloud technology solutions and IT infrastructure services.
5+ YOE5–8+ years in Application Security; hands-on pipeline security; SLSA/NIST SSDF; secrets management; WAF and API security; multiple programming languages; cloud security; OWASP Top 10; SBOM/CI-CD tooling.
GitHub, GitLab, Jenkins, Sigstore, Cosign, SAST, DAST, SCA, Container scanning, WAF, SBOM tooling, IaC scanning
3w
Save
Mark Applied
Hide
Security Engineer – Identity Governance & Administration (IGA)
Raleigh or Charlotte or Greensboro or Wilson or Atlanta
OnsiteFull Time
Truist
TruistNYSE: TFC: Offers personal banking, business lending, and investment management services.
5+ YOEBachelor's degree or equivalent, minimum 5 years security engineering experience, experience with IGA application onboarding, federation (SAML/OAuth/OIDC/WS-Fed), MFA, SoD controls, SDLC security, threat modeling and security testing.
SailPoint, Saviynt, Omada, SAML, OAuth, OIDC, WS-Fed, API, SCIM, JDBC, AD groups, Azure AD/Entra ID, AD DS, RBAC, ABAC, SSO
2w
Save
Mark Applied
Hide
Principal Software Engineer/Developer
Durham, North Carolina, United States
OnsiteFull Time
Fidelity Investments
Fidelity Investments: Provides investment management, retirement planning, and brokerage services.
3+ YOEBachelor's (5+ years) or Master's (3+ years) in CS/Engineering/IT/IS and experience developing and securing customer-facing web applications and APIs; expertise in Java, JavaScript frameworks, cloud (AWS), CI/CD, containers, and RDBMS/SQL.
Angular.js, Angular, React.js, Node.js, HTML, HTML5, JavaEE, Apache Tomcat, Spring MVC, Spring Boot, SLF4j, Maven, Karate, Cucumber, FitNesse, Gerkin, Protractor, Docker, Amazon Web Services (AWS), AWS Console, AWS S3, Jenkins, Kubernetes (EKS), Java, Message Queues (MQ), PL/SQL, SQL, BitBucket, GitHub, GitLab
1mo
Save
Mark Applied
Hide
Senior Archer GRC Solution Engineer
Westlake or Durham
OnsiteFull Time
Fidelity Investments
Fidelity Investments: Provides investment management, retirement planning, and brokerage services.
8+ YOE8+ years developing and supporting Archer 6.x GRC applications, 9+ years in information security/IT/GRC, expert risk and compliance knowledge, hands-on Python and SQL, web tech (CSS, JavaScript, jQuery, XML), RESTful API integration, and stakeholder collaboration.
Archer 6.x, CSS, JavaScript, jQuery, XML, Python, SQL, JavaScript Transformer, RESTful APIs, Snowflake, Power BI
1mo
Save
Mark Applied
Hide
IT Applications Engineer IV, Mobile
Greensboro, North Carolina, United States
OnsiteFull Time
Kaiser Permanente
Kaiser Permanente: Provides integrated medical care and health insurance plans.
4+ YOEBachelors in CS/CIS or equivalent experience; 4+ years software development; 3+ years SDLC and mobile app development; 1+ year technical leadership; experience with Agile, mobile platforms, and mobile security practices.
Agile, SDLC, Android, iOS, Jenkins, SonarQube, JUnit, XCTest, Gradle, CocoaPods
1mo
Save
Mark Applied
Hide
IT Applications Engineer V, Mobile
Greensboro, North Carolina, United States
OnsiteFull Time
Kaiser Permanente
Kaiser Permanente: Provides integrated medical care and health insurance plans.
6+ YOEBachelors in CS/CIS or equivalent experience, 6+ years software development, 5+ years SDLC and mobile app experience, 2+ years technical leadership, Android/iOS development, Agile, and mobile security expertise.
Android, iOS, Jenkins, SonarQube, JUnit, XCTest, Gradle, CocoaPods
1mo
Save
Mark Applied
Hide
Principal, Cybersecurity Penetration Tester
Durham, North Carolina, United States
OnsiteFull Time
Fidelity Investments
Fidelity Investments: Provides investment management, retirement planning, and brokerage services.
3+ YOEBachelor's in CS/Engineering/IT/IS +5 years (or Master's +3 years) experience in application penetration testing; expertise with BurpSuite, Kali Linux, Python, GHAS, Veracode SCA, exploit research, and web/mobile/API security testing.
BurpSuite Professional Edition, Fiddler, Kali Linux, SQLMap, GitHub Advanced Security (GHAS), MEND, Veracode SCA, Exploit-DB, NVD, Python, Selenium
1mo
Save
Mark Applied
Hide
Manager, Defense Applications
Durham or Research Triangle Park
OnsiteFull Time
Vulcan Elements
Vulcan Elements: Manufactures American rare-earth permanent magnets for critical technologies.
7+ YOE7+ years in engineering, technical sales, or program management in defense/advanced manufacturing; strong relationship management; cross-functional execution; US person eligible for security clearance.