115 application security engineer jobs at 75 companies in Hampstead, MD
1mo
Save
Mark Applied
Hide
1mo
Application Security Engineer
Washington, District of Columbia, United States
$180k-$200k/yrRemoteFull Time
Virtru: Provides data-centric encryption and privacy control software for organizations.
4+ YOE4+ years in application security or secure development, strong cryptography and web security knowledge, experience with Node.js and Go, SAST/DAST/IAST/SCA tooling, vulnerability programs (bug bounty, pentest), and familiarity with cloud infra (GCP/AWS) and Kubernetes preferred.
Node.js, Go, Trusted Data Format (TDF), SAST, DAST, IAST, SCA, Burp, ZAP, Qualys, Nessus, GCP, AWS, Kubernetes, Slack, Zoom
D&H Distributing: Distributes technology products and IT solutions to resellers.
3+ YOEDesigns and implements secure software practices; assesses application security; supports SDLC; proficient in at least one programming language; familiar with OWASP Top 10; experience with security assessments and vendor security.
Chicago or California or Colorado or Florida or Georgia or Illinois or Indiana or Minnesota or Missouri or Montana or New Jersey or New York or North Carolina or Ohio or Oregon or Pennsylvania or South Carolina or Texas or Utah or Vermont or Virginia or Washington or Washington or Wisconsin
$210k-$260k/yrHybridFull Time
NinjaTrader: Provides futures brokerage services and a trading software platform.
7+ YOE7+ years in application/product/security engineering; hands-on threat modeling, vulnerability management, secure design, CI/CD integration, automation using Python/Go; experience with cloud-native AWS/GCP environments.
Cvent: Cloud-based software for event and venue management.
5+ YOE5+ years in application security or secure software development; strong scripting in Python, JavaScript/TypeScript, or Bash; CI/CD and SDLC security integration; cloud (AWS preferred) and tool familiarity; end-to-end ownership experience.
ManTech: Provides technology solutions for defense and intelligence agencies.
11+ YOETS/SCI with poly required. 11–15+ years experience in systems security, software engineering, or computer science. Hands-on C/C++ or C#, ability to read Java, experience with software assurance tools and source code analysis.
Application Security Engineer — Secure Mission Systems
United States or Laurel
RemoteFull Time
Rackner: Builds cloud-native software and AI systems for government agencies.
6+ YOE6+ years in SAST/DAST and vulnerability remediation, bachelor’s in cybersecurity, experience with application-security testing, secure SDLC, and working with development teams to remediate findings.
Booz Allen HamiltonNYSE: BAH: Consulting and technology services for government and commercial clients
4+ YOERequires 4+ years supporting DoD enterprise architecture, 4+ years designing/administrating F5 BIG-IP, experience with inline break-and-inspect proxies, TLS/mTLS configuration, knowledge of PKI/cryptography, Secret clearance, HS diploma or GED.
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
4+ YOE4+ years DoD enterprise architecture experience; 4+ years designing, implementing, and administering F5 BIG-IP and in-line break-and-inspect proxy solutions; experience with TLS/mTLS and DoD stakeholders; knowledge of cryptography and PKI; Secret clearance; HS diploma or GED.
F5 BIG-IP, Microsoft Office 365, Microsoft Teams, RDP, SSH, CLI, Linux, NIST 800-53, FIPS, DoD STIG, FedRAMP
Phoenix Contact: Produces components for electrical engineering and industrial automation.
7+ YOEBachelor's in engineering, 7+ years application or network engineering experience, deep Industrial Ethernet and network architecture knowledge, IEC/ISA 62443 familiarity, relevant networking/security certifications preferred, willingness to travel up to 30%.
Web Application Security Engineer (AppSec / DevSecOps)
Washington, District of Columbia, United States
HybridFull Time
Essnova Solutions: Provides professional and technical services to government entities.
Experience in application security, secure SDLC, vulnerability assessment, WAF, CI/CD/DevSecOps integration, and familiarity with federal frameworks (NIST, FedRAMP); Public Trust clearance or ability to obtain.
SAST, DAST, Software Composition Analysis (SCA), Web Application Firewall (WAF), CI/CD, DevSecOps, AWS, Microsoft Azure, OWASP Top 10, NIST, FedRAMP
CACINYSE: CACI: Provides information technology and professional services to government clients.
Active TS/SCI with Polygraph; strong analytics development background; proficiency in Python; experience with RMF, system authorization, and vulnerability management (e.g., Nessus); 4+ years experience typical depending on degree.
CACI InternationalNYSE: CACI: Provides information technology and engineering services for government agencies.
Active TS/SCI with polygraph, strong analytics development background, proficiency in Python, experience with system authorization, RMF, and vulnerability management; multi-year technical experience as specified by education.
Anduril Industries: Defense technology building autonomous military hardware and software.
5+ YOE5+ years progressive technical security experience, active SECRET clearance, knowledge of ICD-705/IC Tech Spec, commissioning IDS/ACS, proficiency with accreditation and AO interaction, strong communication and problem solving.
Integrity Technology Consultants: Provides engineering and management consulting solutions to US national security.
Active Top Secret/SCI with polygraph required; senior experience in cloud security, architecture, and governance; multi-year experience (varies by degree); strong communication and technical skills.
EOA Technologies: Designs and manages secure IT infrastructure for government agencies.
4+ YOEActive TS/SCI with Polygraph required; 4+ years technical experience (higher experience alternative options listed); cloud computing and virtualization experience; strong communication and architecture skills; knowledge of cloud security and compliance.
RiVidium: Provides cybersecurity software and IT services to federal agencies.
5+ YOERequires 5+ years of secure software or application security engineering, 3+ years of web application security or SSDLC, a bachelor's degree or equivalent, and active Top Secret clearance.
Wyetech: Provides professional engineering services for government and commercial sectors.
4+ YOETS/SCI with agency-appropriate polygraph required. Multiple years technical experience (4+ minimum depending on degree). Experience with cloud security, virtualization, and system/network architectures.