198 application security engineer jobs at 117 companies in Forestville, MD
2mo
Save
Mark Applied
Hide
2mo
Application Security Engineer
Washington, District of Columbia, United States
$180k-$200k/yrRemoteFull Time
Virtru: Provides data-centric encryption and privacy control software for organizations.
4+ YOE4+ years in application security or secure development, strong cryptography and web security knowledge, experience with Node.js and Go, SAST/DAST/IAST/SCA tooling, vulnerability programs (bug bounty, pentest), and familiarity with cloud infra (GCP/AWS) and Kubernetes preferred.
Node.js, Go, Trusted Data Format (TDF), SAST, DAST, IAST, SCA, Burp, ZAP, Qualys, Nessus, GCP, AWS, Kubernetes, Slack, Zoom
Veilant: Protecting operations, personnel, and data from emerging surveillance threats.
2+ YOERequires 2+ years of Java development, application security testing, source-code review, web security, CI/CD, containers, cloud platforms, and strong technical communication; must be able to obtain security clearance.
Chicago or California or Colorado or Florida or Georgia or Illinois or Indiana or Minnesota or Missouri or Montana or New Jersey or New York or North Carolina or Ohio or Oregon or Pennsylvania or South Carolina or Texas or Utah or Vermont or Virginia or Washington or Washington or Wisconsin
$210k-$260k/yrHybridFull Time
NinjaTrader: Provides futures brokerage services and a trading software platform.
7+ YOE7+ years in application/product/security engineering; hands-on threat modeling, vulnerability management, secure design, CI/CD integration, automation using Python/Go; experience with cloud-native AWS/GCP environments.
Cvent: Cloud-based software for event and venue management.
5+ YOE5+ years in application security or secure software development; strong scripting in Python, JavaScript/TypeScript, or Bash; CI/CD and SDLC security integration; cloud (AWS preferred) and tool familiarity; end-to-end ownership experience.
WalmartNYSE: WMT: Multinational retail operating discount stores and supermarkets.
4+ YOEBachelor's degree plus 4 years in application security, or 6 years of application security experience. Preferred security certifications and project leadership experience.
WalmartNYSE: WMT: Operates a chain of hypermarkets, discount stores, and grocery stores.
4+ YOEBachelor's degree plus 4 years in application security, or 6 years' application security experience. Preferred security certifications, master's degree, and cybersecurity project leadership experience.
Application Security Engineer — Secure Mission Systems
United States or Laurel
RemoteFull Time
Rackner: Builds cloud-native software and AI systems for government agencies.
6+ YOE6+ years in SAST/DAST and vulnerability remediation, bachelor’s in cybersecurity, experience with application-security testing, secure SDLC, and working with development teams to remediate findings.
Concept Plus: Delivers enterprise IT services for federal government agencies.
8+ YOERequires U.S. citizenship, TS/SCI clearance with polygraph, 8+ years in application security or related fields, bachelor's degree, secure SDLC and cloud-native experience, and proficiency with listed security technologies and standards.
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
3+ YOERequires 3+ years programming, 2+ years security code review and systems troubleshooting, STEM bachelor's degree or 2+ years IT security experience, networking knowledge, and vulnerability remediation expertise.
Web Application Security Engineer (AppSec / DevSecOps)
Washington, District of Columbia, United States
HybridFull Time
Essnova Solutions: Provides professional and technical services to government entities.
Experience in application security, secure SDLC, vulnerability assessment, WAF, CI/CD/DevSecOps integration, and familiarity with federal frameworks (NIST, FedRAMP); Public Trust clearance or ability to obtain.
SAST, DAST, Software Composition Analysis (SCA), Web Application Firewall (WAF), CI/CD, DevSecOps, AWS, Microsoft Azure, OWASP Top 10, NIST, FedRAMP
CACINYSE: CACI: Provides information technology and professional services to government clients.
Active TS/SCI with Polygraph; strong analytics development background; proficiency in Python; experience with RMF, system authorization, and vulnerability management (e.g., Nessus); 4+ years experience typical depending on degree.
CACI InternationalNYSE: CACI: Provides information technology and engineering services for government agencies.
Active TS/SCI with polygraph, strong analytics development background, proficiency in Python, experience with system authorization, RMF, and vulnerability management; multi-year technical experience as specified by education.
Anduril Industries: Defense technology building autonomous military hardware and software.
5+ YOE5+ years progressive technical security experience, active SECRET clearance, knowledge of ICD-705/IC Tech Spec, commissioning IDS/ACS, proficiency with accreditation and AO interaction, strong communication and problem solving.
EOA Technologies: Designs and manages secure IT infrastructure for government agencies.
4+ YOEActive TS/SCI with Polygraph required; 4+ years technical experience (higher experience alternative options listed); cloud computing and virtualization experience; strong communication and architecture skills; knowledge of cloud security and compliance.
Los Angeles or Dallas or Denver or Houston or New York City or Orange County or Palo Alto or San Francisco or Washington or Los Angeles
$170k-$200k/yrOnsiteFull Time
Gibson Dunn: A global law firm advising clients on significant transactions and disputes.
8+ YOERequires 8+ years supporting enterprise applications, a bachelor's degree or equivalent experience, advanced SQL, T-SQL, Windows, Linux, PowerShell, integration, security, and troubleshooting expertise.
iManage Work 10, RAVN, iManage Mobility, Threat Manager, Co-Authoring, Closing Folders, SPM, Litera CAM, GDSI, Intapp Wallbuilder, Intapp Integrate, Boomi, Micro Focus Content Manager, IDOL OEM, iCompli, Future In Tech (FiT), Windows Server 2016, Windows Server 2017, Windows Server 2018, Windows Server 2019, Windows Server 2020, Windows Server 2021, Windows Server 2022, Apache, Linux, Windows OS, macOS, AVD, Intapp Walls, Microsoft SQL, T-SQL, PowerShell, REST APIs, AWS, Azure, Office 365, Microsoft SharePoint, Microsoft Teams, ITIL, Lean, Agile, Integration Builder
ASRC Federal: Provides engineering and IT services to federal government agencies.
2+ YOEU.S. citizenship with ability to obtain security clearance; Bachelor's in CS/Engineering; 2+ years software development; proficiency with Java, JavaScript, relational databases, Git, HTML/CSS/JSON/XML; strong analytical and communication skills.
Fannie MaeOTCQB: FNMA: Providing liquidity and stability to the U.S. housing market.
8+ YOEBachelor's degree and 8+ years in cybersecurity or related engineering. Requires multi-cloud security expertise across AWS, Google Cloud, and Microsoft Azure, infrastructure security, automation, application security, AI security, and cross-functional leadership.