147 application security engineer jobs at 99 companies in Rosedale, MD
2mo
Save
Mark Applied
Hide
Application Security Engineer
Washington, District of Columbia, United States
$180k-$200k/yr RemoteFull Time
4+ YOE4+ years in application security or secure development, strong cryptography and web security knowledge, experience with Node.js and Go, SAST/DAST/IAST/SCA tooling, vulnerability programs (bug bounty, pentest), and familiarity with cloud infra (GCP/AWS) and Kubernetes preferred.
Node.js, Go, Trusted Data Format (TDF), SAST, DAST, IAST, SCA, Burp, ZAP, Qualys, Nessus, GCP, AWS, Kubernetes, Slack, Zoom
3mo
Save
Mark Applied
Hide
Application Security Engineer 3
Arlington, Virginia, United States
OnsiteFull Time
5+ YOELead application security engineering, design scalable security architectures, perform risk assessments, integrate security across the SDLC, and drive automation.
Python, Java, JavaScript, SAST, DAST, SCA, IaC, Container, Cloud Security, Kubernetes, DevSecOps
2w
Save
Mark Applied
Hide
Application Security Engineer
Tysons, Virginia, United States
$115k-$145k/yr HybridFull Time
2+ YOERequires 2+ years of Java development, application security testing, source-code review, web security, CI/CD, containers, cloud platforms, and strong technical communication; must be able to obtain security clearance.
Java, Java Spring Boot, Angular, REST APIs, SQL, PostgreSQL, JWT, OAuth, Entra, Keycloak, GitLab CI, Azure DevOps, GitHub Actions, Kubernetes, Trivy, Kubesec, Azure, AWS, GitLab Secrets Manager, AWS KMS, Azure Key Vault, Ansible Vault, SAST, DAST, SCA, Falco, NeuVector, Burp Suite, CI/CD, IaC
1mo
Save
Mark Applied
Hide
Staff Security Engineer, Application Security
Chicago or California or Colorado or Florida or Georgia or Illinois or Indiana or Minnesota or Missouri or Montana or New Jersey or New York or North Carolina or Ohio or Oregon or Pennsylvania or South Carolina or Texas or Utah or Vermont or Virginia or Washington or Washington or Wisconsin
$210k-$260k/yr HybridFull Time
7+ YOE7+ years in application/product/security engineering; hands-on threat modeling, vulnerability management, secure design, CI/CD integration, automation using Python/Go; experience with cloud-native AWS/GCP environments.
AWS, GCP, Python, Go, SAST, SCA, DAST, CI/CD, AI/LLMs
2mo
Save
Mark Applied
Hide
Staff Application Security Engineer
Washington, District of Columbia, United States
$150k-$173k/yr OnsiteFull Time
4+ YOE4+ years in application/product/software security; experience with secure SDLC tooling (GitHub Advanced Security, CodeQL, Dependabot, SAST/SCA/DAST), familiarity with AWS security, ability to read code (Python, TypeScript, Go, Java, C#, C++), strong communication and offensive-security mindset.
GitHub, GitHub Advanced Security, CodeQL, Dependabot, SAST, SCA, DAST, Palantir Foundry, AWS, IAM, CI/CD, Python, TypeScript, Go, Java, C#, C++, OWASP ASVS, OWASP Top 10, OWASP API Security Top 10, NIST CSF, NIST 800-53, SOC 2, IEC 62443, NERC CIP
3w
Save
Mark Applied
Hide
Senior Engineer, Application Security
Tysons Corner, Virginia, United States
$120k-$160k/yr HybridFull Time
5+ YOE5+ years in application security or secure software development; strong scripting in Python, JavaScript/TypeScript, or Bash; CI/CD and SDLC security integration; cloud (AWS preferred) and tool familiarity; end-to-end ownership experience.
Python, JavaScript, TypeScript, Bash, AWS, GCP, Azure, AWS CDK, Burp Suite, Checkmarx, Mend, Veracode, Fortify, ZAP, Wiz, CI/CD, SAST, DAST, SCA
4w
Save
Mark Applied
Hide
Application Security Engineer — Secure Mission Systems
United States or Laurel
RemoteFull Time
6+ YOE6+ years in SAST/DAST and vulnerability remediation, bachelor’s in cybersecurity, experience with application-security testing, secure SDLC, and working with development teams to remediate findings.
Fortify, X-Ray, OWASP ZAP, GitLab, Artifactory, OpenShift, Kubernetes, WebAssembly (WASM)
1d
Save
Mark Applied
Hide
Mobile Security Engineer, Application Security
United States or Texas or Virtual
$159k-$202k/yr RemoteFull Time
3+ YOEBachelor’s degree or equivalent; 3+ years in penetration testing, client-side application security, security engineering, code auditing, and programming; threat modeling and binary analysis experience required.
Python, Ruby, C, C++, Java, .NET, Ghidra, IDA Pro, Radare2, Hopper, Jadx, Frida, Objection, LLDB, Burp Suite, AWS
1mo
Save
Mark Applied
Hide
Web Application Security Engineer (AppSec / DevSecOps)
Washington, District of Columbia, United States
HybridFull Time
Experience in application security, secure SDLC, vulnerability assessment, WAF, CI/CD/DevSecOps integration, and familiarity with federal frameworks (NIST, FedRAMP); Public Trust clearance or ability to obtain.
SAST, DAST, Software Composition Analysis (SCA), Web Application Firewall (WAF), CI/CD, DevSecOps, AWS, Microsoft Azure, OWASP Top 10, NIST, FedRAMP
1mo
Save
Mark Applied
Hide
Security Automation Application Engineer
Linthicum, Maryland, United States
$104k-$218k/yr OnsiteFull Time
Active TS/SCI with Polygraph; strong analytics development background; proficiency in Python; experience with RMF, system authorization, and vulnerability management (e.g., Nessus); 4+ years experience typical depending on degree.
Python, Pig, PySpark, AWS Lambda, Nessus Vulnerability Scanner
1mo
Save
Mark Applied
Hide
Security Automation Application Engineer
Linthicum Heights, Maryland, United States
$104k-$218k/yr OnsiteFull Time
Active TS/SCI with polygraph, strong analytics development background, proficiency in Python, experience with system authorization, RMF, and vulnerability management; multi-year technical experience as specified by education.
Python, Pig, PySpark, AWS Lambda, Nessus Vulnerability Scanner, Risk Management Framework (RMF)
1mo
Save
Mark Applied
Hide
Technical Security Application Engineer, Secured Spaces
Washington, District of Columbia, United States
$146k-$194k/yr OnsiteFull Time
5+ YOE5+ years progressive technical security experience, active SECRET clearance, knowledge of ICD-705/IC Tech Spec, commissioning IDS/ACS, proficiency with accreditation and AO interaction, strong communication and problem solving.
Lattice OS, Lenel OnGuard, Genetec, DMP, Bosch
1mo
Save
Mark Applied
Hide
Application Engineer Expert Level
Linthicum, Maryland, United States
$225k-$305k/yr OnsiteFull Time
Active Top Secret/SCI with polygraph required; senior experience in cloud security, architecture, and governance; multi-year experience (varies by degree); strong communication and technical skills.
AWS, Azure, Google Cloud, IAM, SCPs, AWS Key Management Service, AWS Config, AWS Security Hub, GuardDuty, Inspector, Risk Management Framework, Zero-Trust
4w
Save
Mark Applied
Hide
APPLICATION ENGINEER LEVEL 4
Fort Meade, Maryland, United States
OnsiteFull Time
4+ YOEActive TS/SCI with Polygraph required; 4+ years technical experience (higher experience alternative options listed); cloud computing and virtualization experience; strong communication and architecture skills; knowledge of cloud security and compliance.
AWS, Azure, Google Cloud, IAM, SCPs, AWS Key Management Service, AWS Config, AWS Security Hub, Guard Duty, Inspector
4h
Save
Mark Applied
Hide
Senior Application Engineer
Los Angeles or Dallas or Denver or Houston or New York City or Orange County or Palo Alto or San Francisco or Washington or Los Angeles
$170k-$200k/yr OnsiteFull Time
8+ YOERequires 8+ years supporting enterprise applications, a bachelor's degree or equivalent experience, advanced SQL, T-SQL, Windows, Linux, PowerShell, integration, security, and troubleshooting expertise.
iManage Work 10, RAVN, iManage Mobility, Threat Manager, Co-Authoring, Closing Folders, SPM, Litera CAM, GDSI, Intapp Wallbuilder, Intapp Integrate, Boomi, Micro Focus Content Manager, IDOL OEM, iCompli, Future In Tech (FiT), Windows Server 2016, Windows Server 2017, Windows Server 2018, Windows Server 2019, Windows Server 2020, Windows Server 2021, Windows Server 2022, Apache, Linux, Windows OS, macOS, AVD, Intapp Walls, Microsoft SQL, T-SQL, PowerShell, REST APIs, AWS, Azure, Office 365, Microsoft SharePoint, Microsoft Teams, ITIL, Lean, Agile, Integration Builder
2mo
Save
Mark Applied
Hide
Senior Application Developer
Fort Meade, Maryland, United States
$164k-$200k/yr OnsiteFull Time
12+ YOESecurity clearance TS/SCI with poly; 12+ years software engineering; reverse engineering, development, and analyst skills.
C, C++, Python, Assembly, Reverse Engineering, Networking
2mo
Save
Mark Applied
Hide
Senior Security Engineer
Austin or Bochum or Dubai or Geneva or London or Singapore or Tokyo or Washington
OnsiteFull Time
Senior-level security engineering experience with cloud (AWS), application security, vulnerability management, DLP, scripting/automation (Python or Bash), and experience assessing SaaS/security tools (Wiz, CrowdStrike). Strong communication skills.
AWS, Python, Bash, Wiz, CrowdStrike, Google Workspace, GitHub Copilot, Claude Code, Codex, Cursor, Gemini, Devin, SonarQube, SonarQube Foundation Agent, SonarSweep, Sonar Context Augmentation, DLP
2w
Save
Mark Applied
Hide
Application Developer/Programmer
Alexandria, Virginia, United States
$120k-$250k/yr OnsiteFull Time
0+ YOEDevelop, test, implement, and maintain web and database applications; proficiency with Java/J2EE stack and related frameworks; security clearance (TS/SCI) required; bachelor’s degree and relevant certifications preferred.
Java, J2EE, JSP, HTML, XML, Spring, Hibernate, CSS, JavaScript, Apache Tomcat, Git
2w
Save
Mark Applied
Hide
Web Developer Security Engineer (DC, Washington)
Washington, District of Columbia, United States
$145k-$175k/yr OnsiteFull Time
5+ YOERequires 5+ years of secure software or application security engineering, 3+ years of web application security or SSDLC, a bachelor's degree or equivalent, and active Top Secret clearance.
OWASP Top 10, WAF, FIM, CI/CD, DevSecOps
2mo
Save
Mark Applied
Hide
Web Developer Security Engineer
Washington, District of Columbia, United States
HybridFull Time
3+ YOE3+ years in application security/SSDLC, strong OWASP knowledge, vulnerability lifecycle management, DevSecOps/CI-CD integration, WAF and FIM experience, Tier II security operations, relevant application/offensive/foundational security certification.
C#, ASP.NET MVC, WCF, HTML5, CSS3, JavaScript, React, TypeScript, REST APIs, SQL, Python, Node.js, Java, GitHub Copilot, WAF, File Integrity Monitoring (FIM), SIEM, IDS/IPS, NDR, EDR, AWS, Docker, Kubernetes
Explore Jobs