PromotedHiringCafe
Founding Backend / Infra Engineer
Cupertino, CA, US
$160k-$300k/yr On-SiteFull Time
Own the crawlers, pipelines, and infrastructure powering a real-time job search engine. Strong Node.js and Python fundamentals; bonus points for security and reverse-engineering chops.
Node.js, Python, Elasticsearch, Redis
1mo
Save
Mark Applied
Hide
Application Security Engineer
Washington, District of Columbia, United States
$180k-$200k/yr RemoteFull Time
4+ YOE4+ years in application security or secure development, strong cryptography and web security knowledge, experience with Node.js and Go, SAST/DAST/IAST/SCA tooling, vulnerability programs (bug bounty, pentest), and familiarity with cloud infra (GCP/AWS) and Kubernetes preferred.
Node.js, Go, Trusted Data Format (TDF), SAST, DAST, IAST, SCA, Burp, ZAP, Qualys, Nessus, GCP, AWS, Kubernetes, Slack, Zoom
2mo
Save
Mark Applied
Hide
Application Security Engineer 3
Arlington, Virginia, United States
OnsiteFull Time
5+ YOELead application security engineering, design scalable security architectures, perform risk assessments, integrate security across the SDLC, and drive automation.
Python, Java, JavaScript, SAST, DAST, SCA, IaC, Container, Cloud Security, Kubernetes, DevSecOps
2mo
Save
Mark Applied
Hide
Application Security Engineer
Fort Meade, Maryland, United States
$87k-$198k/yr OnsiteFull Time
4+ YOE4+ years DoD enterprise security architecture, F5 BIG-IP expertise, DoD IL Clouds/on‑prem, VMware/NSX-T, SD-WAN, Secret clearance, HS diploma or GED.
F5 BIG-IP, VMware NSX-T, LTM, APM, ASM, SD-WAN, RDP, SSH, TLS, PKI
1w
Save
Mark Applied
Hide
Staff Security Engineer, Application Security
Chicago or California or Colorado or Florida or Georgia or Illinois or Indiana or Minnesota or Missouri or Montana or New Jersey or New York or North Carolina or Ohio or Oregon or Pennsylvania or South Carolina or Texas or Utah or Vermont or Virginia or Washington or Washington or Wisconsin
$210k-$260k/yr HybridFull Time
7+ YOE7+ years in application/product/security engineering; hands-on threat modeling, vulnerability management, secure design, CI/CD integration, automation using Python/Go; experience with cloud-native AWS/GCP environments.
AWS, GCP, Python, Go, SAST, SCA, DAST, CI/CD, AI/LLMs
1mo
Save
Mark Applied
Hide
Staff Application Security Engineer
Washington, District of Columbia, United States
$150k-$173k/yr OnsiteFull Time
4+ YOE4+ years in application/product/software security; experience with secure SDLC tooling (GitHub Advanced Security, CodeQL, Dependabot, SAST/SCA/DAST), familiarity with AWS security, ability to read code (Python, TypeScript, Go, Java, C#, C++), strong communication and offensive-security mindset.
GitHub, GitHub Advanced Security, CodeQL, Dependabot, SAST, SCA, DAST, Palantir Foundry, AWS, IAM, CI/CD, Python, TypeScript, Go, Java, C#, C++, OWASP ASVS, OWASP Top 10, OWASP API Security Top 10, NIST CSF, NIST 800-53, SOC 2, IEC 62443, NERC CIP
2mo
Save
Mark Applied
Hide
Staff, Application Security Engineer - Product Security
Bentonville or Herndon
$110k-$220k/yr OnsiteFull Time
4+ YOE4+ years application security experience with Bachelor's or 6+ years without; expertise in secure architecture, threat modeling, SAST/SCA, OWASP, automation of security validation, and strong communication skills.
SAST, SCA, OWASP
3w
Save
Mark Applied
Hide
Application Security Engineer
Tysons, Virginia, United States
HybridFull Time
2+ YOEAbility to obtain security clearance; 2+ years Java development; experience with Java Spring Boot, Angular, REST APIs, SQL/PostgreSQL, JWT/OAuth; hands-on web security testing (Burp Suite); CI/CD (GitLab CI, Azure DevOps, GitHub Actions); Kubernetes and container/runtime security; familiarity with SAST/DAST/SCA and secrets management.
Java, Java Spring Boot, Angular, REST APIs, SQL, PostgreSQL, JWT, OAuth, Entra, Keycloak, Burp Suite, GitLab CI, Azure DevOps, GitHub Actions, Kubernetes, Trivy, Kubesec, Falco, NeuVector, GitLab Secrets Manager, AWS KMS, Azure Key Vault, Ansible Vault, SAST, DAST, SCA, IaC, CI/CD
3d
Save
Mark Applied
Hide
Security Engineer, Infrastructure Application Security
Herndon, Virginia, United States
OnsiteFull Time
Bachelor's in engineering/CS, knowledge of system vulnerabilities and remediation, experience with web protocols and threat modeling, coding/scripting experience, penetration testing knowledge.
AWS, Python, Perl, Bash, PowerShell, HTTP, DNS, TCP/IP
2mo
Save
Mark Applied
Hide
Application Security Engineer
Fort Meade or Columbus or Ford Island or Hill AFB or Mechanicsburg or Pensacola or San Antonio or Scott AFB or Tinker AFB
$87k-$198k/yr HybridMultiple Commitments Available
4+ YOE4+ years with DoD enterprise architecture, TLS/mTLS, F5 BIG-IP, proxy solutions; DoD client experience; secret clearance; HS diploma or GED.
F5 BIG-IP, TLS, mTLS, RDP, SSH, CLI, DoD IT tools
1mo
Save
Mark Applied
Hide
Principal Cloud Application Security Engineer
Arlington or United States
$182k-$239k/yr RemoteFull Time
12+ YOE12+ years in information/cloud/application security; 5+ years AWS, Docker, Kubernetes; 2+ years Terraform; cloud security, IaC, incident response, CI/CD integration; bachelor's or equivalent; strong communication.
AWS, Docker, Kubernetes, Terraform
3w
Save
Mark Applied
Hide
Web Application Security Engineer (AppSec / DevSecOps)
Washington, District of Columbia, United States
HybridFull Time
Experience in application security, secure SDLC, vulnerability assessment, WAF, CI/CD/DevSecOps integration, and familiarity with federal frameworks (NIST, FedRAMP); Public Trust clearance or ability to obtain.
SAST, DAST, Software Composition Analysis (SCA), Web Application Firewall (WAF), CI/CD, DevSecOps, AWS, Microsoft Azure, OWASP Top 10, NIST, FedRAMP
1w
Save
Mark Applied
Hide
Web Developer / Application Security (AppSec) Engineer
Washington, District of Columbia, United States
OnsiteFull Time
Experience with secure SDLC, DevSecOps automation, vulnerability remediation, and protecting web applications; development experience with REST APIs, SQL, .NET/C#, JavaScript, Python, Node.js, React, TypeScript; familiarity with SIEM, IDS/IPS, EDR/NDR, Wireshark; U.S. citizenship required; security certifications preferred.
REST APIs, SQL, .NET/C#, JavaScript, Python, Node.js, React, TypeScript, SIEM, IDS/IPS, EDR/NDR, Wireshark, WAF, NIST, FISMA, FedRAMP
5d
Save
Mark Applied
Hide
Lead Security Application Engineer
Alexandria, Virginia, United States
$115k-$150k/yr OnsiteFull Time
4+ YOE4+ years VMS/PSIM experience, team leadership, networking and video streaming expertise, Microsoft SQL Server/SQL skills, active U.S. Secret clearance, and ability to travel up to 50% OCONUS.
Surveill, VMS, PSIM, Microsoft SQL Server, SQL, TCP/IP, h.264, h.265, Multicast, Unicast
1w
Save
Mark Applied
Hide
Application Engineer Expert Level
Laurel, Maryland, United States
$225k-$305k/yr OnsiteFull Time
TS/SCI with polygraph required. Extensive Linux, Kubernetes, VM, Ansible, and troubleshooting experience; experience with OpenStack/VMware/AWS, Apache NiFi, and security hardening (STIG/SSP).
YUM, Kubernetes, Rancher, Ansible, OpenStack, VMware, AWS, Apache NiFi, Docker, Python, MongoDB, Riverbed, SSH, RHEL
1mo
Save
Mark Applied
Hide
Senior Application Developer
Fort Meade, Maryland, United States
$164k-$200k/yr OnsiteFull Time
12+ YOESecurity clearance TS/SCI with poly; 12+ years software engineering; reverse engineering, development, and analyst skills.
C, C++, Python, Assembly, Reverse Engineering, Networking
2w
Save
Mark Applied
Hide
Application Developer
Reston, Virginia, United States
OnsiteFull Time
2+ YOEU.S. citizenship with ability to obtain security clearance; Bachelor's in CS/Engineering; 2+ years software development; proficiency with Java, JavaScript, relational databases, Git, HTML/CSS/JSON/XML; strong analytical and communication skills.
Java, JavaScript, PostgreSQL, Oracle, Git, HTML, CSS, JSON, XML, XSLT, XSD, Python, Android, Jenkins, Jira, Confluence, REST, SOAP
1mo
Save
Mark Applied
Hide
Senior Security Engineer
Austin or Bochum or Dubai or Geneva or London or Singapore or Tokyo or Washington
OnsiteFull Time
Senior-level security engineering experience with cloud (AWS), application security, vulnerability management, DLP, scripting/automation (Python or Bash), and experience assessing SaaS/security tools (Wiz, CrowdStrike). Strong communication skills.
AWS, Python, Bash, Wiz, CrowdStrike, Google Workspace, GitHub Copilot, Claude Code, Codex, Cursor, Gemini, Devin, SonarQube, SonarQube Foundation Agent, SonarSweep, Sonar Context Augmentation, DLP
1mo
Save
Mark Applied
Hide
Lead Application Developer
Suitland, Maryland, United States
OnsiteFull Time
15+ MgmtSME-level developer with 15+ years leading application development; expert in cloud-native, microservices, containerization, serverless, DevSecOps, CI/CD, IaC, secure coding, and Section 508 compliance; Bachelor’s in CS or related field.
cloud-native, microservices, containerization, serverless, DevSecOps, CI/CD, version control, automated testing, IaC, Section 508, AI/ML, business intelligence, robotic process automation, SAFe
1w
Save
Mark Applied
Hide
Web Developer Security Engineer
Washington, District of Columbia, United States
OnsiteFull Time
3+ YOEBachelor's degree, 3+ years in web application or application security engineering, experience with AppSec tooling, DevSecOps, WAF/FIM, vulnerability management, and federal compliance (NIST/FISMA/FedRAMP).
.NET (C# MVC, WCF), HTML5, CSS3, JavaScript, REST APIs, SQL, Python, Node.js, TypeScript, Java, React.js, Web Application Firewall (WAF), File Integrity Monitoring (FIM), SIEM, IDS/IPS, EDR, NDR, Wireshark, Docker, Kubernetes, AWS, CI/CD
3w
Save
Mark Applied
Hide
Web Developer Security Engineer
Washington, District of Columbia, United States
HybridFull Time
3+ YOE3+ years in application security/SSDLC, strong OWASP knowledge, vulnerability lifecycle management, DevSecOps/CI-CD integration, WAF and FIM experience, Tier II security operations, relevant application/offensive/foundational security certification.
C#, ASP.NET MVC, WCF, HTML5, CSS3, JavaScript, React, TypeScript, REST APIs, SQL, Python, Node.js, Java, GitHub Copilot, WAF, File Integrity Monitoring (FIM), SIEM, IDS/IPS, NDR, EDR, AWS, Docker, Kubernetes
Explore Jobs