1mo
Save
Mark Applied
Hide
Application Security Engineer
Washington, District of Columbia, United States
$180k-$200k/yr RemoteFull Time
4+ YOE4+ years in application security or secure development, strong cryptography and web security knowledge, experience with Node.js and Go, SAST/DAST/IAST/SCA tooling, vulnerability programs (bug bounty, pentest), and familiarity with cloud infra (GCP/AWS) and Kubernetes preferred.
Node.js, Go, Trusted Data Format (TDF), SAST, DAST, IAST, SCA, Burp, ZAP, Qualys, Nessus, GCP, AWS, Kubernetes, Slack, Zoom
2mo
Save
Mark Applied
Hide
Application Security Engineer 3
Arlington, Virginia, United States
OnsiteFull Time
5+ YOELead application security engineering, design scalable security architectures, perform risk assessments, integrate security across the SDLC, and drive automation.
Python, Java, JavaScript, SAST, DAST, SCA, IaC, Container, Cloud Security, Kubernetes, DevSecOps
3w
Save
Mark Applied
Hide
Staff Security Engineer, Application Security
Chicago or California or Colorado or Florida or Georgia or Illinois or Indiana or Minnesota or Missouri or Montana or New Jersey or New York or North Carolina or Ohio or Oregon or Pennsylvania or South Carolina or Texas or Utah or Vermont or Virginia or Washington or Washington or Wisconsin
$210k-$260k/yr HybridFull Time
7+ YOE7+ years in application/product/security engineering; hands-on threat modeling, vulnerability management, secure design, CI/CD integration, automation using Python/Go; experience with cloud-native AWS/GCP environments.
AWS, GCP, Python, Go, SAST, SCA, DAST, CI/CD, AI/LLMs
5h
Save
Mark Applied
Hide
Application Security Engineer
Tysons Corner, Virginia, United States
$83k-$150k/yr OnsiteFull Time
2+ YOEBachelor's in CS/Engineering, minimum 2 years software or security experience, hands-on with AI security use cases, SAST/DAST/SCA tools, cloud security (AWS/Azure/GCPF), and secure coding; strong communication.
Copilot, Cursor, Claude, GitHub Copilot Autofix, Semgrep, Checkmarx, Fortify, Veracode, SonarQube, Burp Suite, ZAP, SAST, DAST, IAST, SCA, Python, Java, JavaScript, AWS, Azure, GCPF
1mo
Save
Mark Applied
Hide
Staff Application Security Engineer
Washington, District of Columbia, United States
$150k-$173k/yr OnsiteFull Time
4+ YOE4+ years in application/product/software security; experience with secure SDLC tooling (GitHub Advanced Security, CodeQL, Dependabot, SAST/SCA/DAST), familiarity with AWS security, ability to read code (Python, TypeScript, Go, Java, C#, C++), strong communication and offensive-security mindset.
GitHub, GitHub Advanced Security, CodeQL, Dependabot, SAST, SCA, DAST, Palantir Foundry, AWS, IAM, CI/CD, Python, TypeScript, Go, Java, C#, C++, OWASP ASVS, OWASP Top 10, OWASP API Security Top 10, NIST CSF, NIST 800-53, SOC 2, IEC 62443, NERC CIP
1d
Save
Mark Applied
Hide
Senior Engineer, Application Security
Tysons Corner, Virginia, United States
$120k-$160k/yr HybridFull Time
5+ YOE5+ years in application security or secure software development; strong scripting in Python, JavaScript/TypeScript, or Bash; CI/CD and SDLC security integration; cloud (AWS preferred) and tool familiarity; end-to-end ownership experience.
Python, JavaScript, TypeScript, Bash, AWS, GCP, Azure, AWS CDK, Burp Suite, Checkmarx, Mend, Veracode, Fortify, ZAP, Wiz, CI/CD, SAST, DAST, SCA
3d
Save
Mark Applied
Hide
Application Security Engineer
Tysons, Virginia, United States
$92k-$124k/yr HybridFull Time
2+ YOE2+ years Java development, hands-on AppSec testing, secure code review, CI/CD and container security experience, ability to obtain security clearance.
Burp Suite, Java Spring Boot, Angular, REST, PostgreSQL, JWT, OAuth, Entra, Keycloak, GitLab CI, Azure DevOps, GitHub Actions, Kubernetes, Trivy, Kubesec, Falco, NeuVector, Azure, AWS, GitLab Secrets Manager, AWS KMS, Azure Key Vault, Ansible Vault, SAST, DAST, SCA, Infrastructure-as-Code (IaC)
2mo
Save
Mark Applied
Hide
Staff, Application Security Engineer - Product Security
Bentonville or Herndon
$110k-$220k/yr OnsiteFull Time
4+ YOE4+ years application security experience with Bachelor's or 6+ years without; expertise in secure architecture, threat modeling, SAST/SCA, OWASP, automation of security validation, and strong communication skills.
SAST, SCA, OWASP
1w
Save
Mark Applied
Hide
Application Security Engineer — Secure Mission Systems
United States or Laurel
RemoteFull Time
6+ YOE6+ years in SAST/DAST and vulnerability remediation, bachelor’s in cybersecurity, experience with application-security testing, secure SDLC, and working with development teams to remediate findings.
Fortify, X-Ray, OWASP ZAP, GitLab, Artifactory, OpenShift, Kubernetes, WebAssembly (WASM)
2w
Save
Mark Applied
Hide
Security Engineer, Infrastructure Application Security
Herndon, Virginia, United States
OnsiteFull Time
Bachelor's in engineering/CS, knowledge of system vulnerabilities and remediation, experience with web protocols and threat modeling, coding/scripting experience, penetration testing knowledge.
AWS, Python, Perl, Bash, PowerShell, HTTP, DNS, TCP/IP
1mo
Save
Mark Applied
Hide
Web Application Security Engineer (AppSec / DevSecOps)
Washington, District of Columbia, United States
HybridFull Time
Experience in application security, secure SDLC, vulnerability assessment, WAF, CI/CD/DevSecOps integration, and familiarity with federal frameworks (NIST, FedRAMP); Public Trust clearance or ability to obtain.
SAST, DAST, Software Composition Analysis (SCA), Web Application Firewall (WAF), CI/CD, DevSecOps, AWS, Microsoft Azure, OWASP Top 10, NIST, FedRAMP
2w
Save
Mark Applied
Hide
Lead Security Application Engineer
Alexandria, Virginia, United States
$115k-$150k/yr OnsiteFull Time
4+ YOE4+ years VMS/PSIM experience, team leadership, networking and video streaming expertise, Microsoft SQL Server/SQL skills, active U.S. Secret clearance, and ability to travel up to 50% OCONUS.
Surveill, VMS, PSIM, Microsoft SQL Server, SQL, TCP/IP, h.264, h.265, Multicast, Unicast
1w
Save
Mark Applied
Hide
Technical Security Application Engineer, Secured Spaces
Washington, District of Columbia, United States
$146k-$194k/yr OnsiteFull Time
5+ YOE5+ years progressive technical security experience, active SECRET clearance, knowledge of ICD-705/IC Tech Spec, commissioning IDS/ACS, proficiency with accreditation and AO interaction, strong communication and problem solving.
Lattice OS, Lenel OnGuard, Genetec, DMP, Bosch
1mo
Save
Mark Applied
Hide
Application Developer
Reston, Virginia, United States
OnsiteFull Time
2+ YOEU.S. citizenship with ability to obtain security clearance; Bachelor's in CS/Engineering; 2+ years software development; proficiency with Java, JavaScript, relational databases, Git, HTML/CSS/JSON/XML; strong analytical and communication skills.
Java, JavaScript, PostgreSQL, Oracle, Git, HTML, CSS, JSON, XML, XSLT, XSD, Python, Android, Jenkins, Jira, Confluence, REST, SOAP
1mo
Save
Mark Applied
Hide
Senior Security Engineer
Austin or Bochum or Dubai or Geneva or London or Singapore or Tokyo or Washington
OnsiteFull Time
Senior-level security engineering experience with cloud (AWS), application security, vulnerability management, DLP, scripting/automation (Python or Bash), and experience assessing SaaS/security tools (Wiz, CrowdStrike). Strong communication skills.
AWS, Python, Bash, Wiz, CrowdStrike, Google Workspace, GitHub Copilot, Claude Code, Codex, Cursor, Gemini, Devin, SonarQube, SonarQube Foundation Agent, SonarSweep, Sonar Context Augmentation, DLP
1mo
Save
Mark Applied
Hide
Lead Application Developer
Suitland, Maryland, United States
OnsiteFull Time
15+ MgmtSME-level developer with 15+ years leading application development; expert in cloud-native, microservices, containerization, serverless, DevSecOps, CI/CD, IaC, secure coding, and Section 508 compliance; Bachelor’s in CS or related field.
cloud-native, microservices, containerization, serverless, DevSecOps, CI/CD, version control, automated testing, IaC, Section 508, AI/ML, business intelligence, robotic process automation, SAFe
1w
Save
Mark Applied
Hide
Associate Security Analyst (Application Security) Contractual -ITDSGGR
Washington, District of Columbia, United States
OnsiteFull Time, Contract
6+ YOEApply application security knowledge to support vulnerability remediation, integrate security tools into CI/CD, and collaborate with engineering teams; requires experience in application security, familiarity with OWASP/NIST, and programming knowledge.
SAST, DAST, SCA, CI/CD, Java, Python, .NET, ServiceNow, Azure DevOps, Microsoft Azure, Power BI, OWASP Top 10, NIST
1w
Save
Mark Applied
Hide
IT Specialist (Application Developer)
Washington, District of Columbia, United States
$144k-$187k/yr OnsiteFull Time
1+ YOEOne year specialized IT experience equivalent to GS-13 designing, developing, testing, deploying, modernizing, and maintaining enterprise applications using low-code, cloud-native, microservices, APIs, CI/CD and DevSecOps; ensures security, accessibility, and operational support; mentors developers.
low-code, cloud-native, microservices, APIs, CI/CD, DevSecOps
1mo
Save
Mark Applied
Hide
Web Developer Security Engineer
Washington, District of Columbia, United States
HybridFull Time
3+ YOE3+ years in application security/SSDLC, strong OWASP knowledge, vulnerability lifecycle management, DevSecOps/CI-CD integration, WAF and FIM experience, Tier II security operations, relevant application/offensive/foundational security certification.
C#, ASP.NET MVC, WCF, HTML5, CSS3, JavaScript, React, TypeScript, REST APIs, SQL, Python, Node.js, Java, GitHub Copilot, WAF, File Integrity Monitoring (FIM), SIEM, IDS/IPS, NDR, EDR, AWS, Docker, Kubernetes
1mo
Save
Mark Applied
Hide
Web Application Developer
McLean or United States
OnsiteFull Time
Experience developing modern web applications with JavaScript/TypeScript frameworks, Node.js, RESTful APIs, SQL databases (PostgreSQL/MySQL), containerization (Docker/Podman), AWS, Git, Agile, and strong security and problem-solving skills. US citizenship and active Top Secret clearance with Full Scope Polygraph required.
JavaScript, TypeScript, Angular, React, Vue, Node.js, Express, Koa, Hapi, HTML5, CSS3, ES6+, Sass, PostgreSQL, MySQL, Prisma, Sequelize, Docker, Podman, AWS, Git, ElasticSearch, Terraform, CloudFormation, leaflet.js, Jenkins, JEE, PKI
Explore Jobs