Fredericksburg • 50 milesRemote · Hybrid · Onsite · Field · All Environments
Fredericksburg • 50 milesRemote · Hybrid · Onsite · Field · All Environments
Fredericksburg • 50 milesRemote · Hybrid · Onsite · Field · All Environments
Fredericksburg • 50 milesRemote · Hybrid · Onsite · Field · All Environments
269 application security jobs at 139 companies in Fredericksburg, VA
2mo
Save
Mark Applied
Hide
Application Security Engineer 3
Arlington, Virginia, United States
OnsiteFull Time
5+ YOELead application security engineering, design scalable security architectures, perform risk assessments, integrate security across the SDLC, and drive automation.
Python, Java, JavaScript, SAST, DAST, SCA, IaC, Container, Cloud Security, Kubernetes, DevSecOps
1mo
Save
Mark Applied
Hide
Application Security Engineer
Washington, District of Columbia, United States
$180k-$200k/yr RemoteFull Time
4+ YOE4+ years in application security or secure development, strong cryptography and web security knowledge, experience with Node.js and Go, SAST/DAST/IAST/SCA tooling, vulnerability programs (bug bounty, pentest), and familiarity with cloud infra (GCP/AWS) and Kubernetes preferred.
Node.js, Go, Trusted Data Format (TDF), SAST, DAST, IAST, SCA, Burp, ZAP, Qualys, Nessus, GCP, AWS, Kubernetes, Slack, Zoom
1w
Save
Mark Applied
Hide
Application Security Senior Manager
Annapolis Junction or New York City or Annapolis or Washington
$125k-$233k/yr OnsiteFull Time
10+ YOE5+ Mgmt10+ years in application development and software security,5+ years leading application security teams,experience with SDLC,threat modeling,DAST/SAST/IAST/SCA,CI/CD,AI scanning,knowledge of OWASP/NIST,Bachelor's degree.
DAST, SAST, IAST, SCA, CI/CD, Mythos, OWASP, NIST
2mo
Save
Mark Applied
Hide
Staff, Application Security Engineer - Product Security
Bentonville or Herndon
$110k-$220k/yr OnsiteFull Time
4+ YOE4+ years application security experience with Bachelor's or 6+ years without; expertise in secure architecture, threat modeling, SAST/SCA, OWASP, automation of security validation, and strong communication skills.
SAST, SCA, OWASP
1mo
Save
Mark Applied
Hide
Staff Application Security Engineer
Washington, District of Columbia, United States
$150k-$173k/yr OnsiteFull Time
4+ YOE4+ years in application/product/software security; experience with secure SDLC tooling (GitHub Advanced Security, CodeQL, Dependabot, SAST/SCA/DAST), familiarity with AWS security, ability to read code (Python, TypeScript, Go, Java, C#, C++), strong communication and offensive-security mindset.
GitHub, GitHub Advanced Security, CodeQL, Dependabot, SAST, SCA, DAST, Palantir Foundry, AWS, IAM, CI/CD, Python, TypeScript, Go, Java, C#, C++, OWASP ASVS, OWASP Top 10, OWASP API Security Top 10, NIST CSF, NIST 800-53, SOC 2, IEC 62443, NERC CIP
6d
Save
Mark Applied
Hide
Senior Engineer, Application Security
Tysons Corner, Virginia, United States
$120k-$160k/yr HybridFull Time
5+ YOE5+ years in application security or secure software development; strong scripting in Python, JavaScript/TypeScript, or Bash; CI/CD and SDLC security integration; cloud (AWS preferred) and tool familiarity; end-to-end ownership experience.
Python, JavaScript, TypeScript, Bash, AWS, GCP, Azure, AWS CDK, Burp Suite, Checkmarx, Mend, Veracode, Fortify, ZAP, Wiz, CI/CD, SAST, DAST, SCA
1d
Save
Mark Applied
Hide
SAP Application Security Lead
Washington, District of Columbia, United States
$117k-$243k/yr RemoteFull Time
7+ YOE7+ years SAP application security experience, role/authorization design, GRC tools, SAP IS-U knowledge, identity/access governance, security operations, US citizenship and eligibility for government clearance.
GRC, SAP IS-U, SAP
1w
Save
Mark Applied
Hide
Application Security Engineer
Tysons, Virginia, United States
$92k-$124k/yr HybridFull Time
2+ YOE2+ years Java development, hands-on AppSec testing, secure code review, CI/CD and container security experience, ability to obtain security clearance.
Burp Suite, Java Spring Boot, Angular, REST, PostgreSQL, JWT, OAuth, Entra, Keycloak, GitLab CI, Azure DevOps, GitHub Actions, Kubernetes, Trivy, Kubesec, Falco, NeuVector, Azure, AWS, GitLab Secrets Manager, AWS KMS, Azure Key Vault, Ansible Vault, SAST, DAST, SCA, Infrastructure-as-Code (IaC)
1mo
Save
Mark Applied
Hide
Web Application Security Engineer (AppSec / DevSecOps)
Washington, District of Columbia, United States
HybridFull Time
Experience in application security, secure SDLC, vulnerability assessment, WAF, CI/CD/DevSecOps integration, and familiarity with federal frameworks (NIST, FedRAMP); Public Trust clearance or ability to obtain.
SAST, DAST, Software Composition Analysis (SCA), Web Application Firewall (WAF), CI/CD, DevSecOps, AWS, Microsoft Azure, OWASP Top 10, NIST, FedRAMP
2w
Save
Mark Applied
Hide
Senior Associate, Application Security, DevSecOps
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yr OnsiteFull Time
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
Java, C#, JavaScript, Python, SQL, CI/CD, SAST, DAST, Azure, OWASP
4w
Save
Mark Applied
Hide
Staff Security Engineer, Application Security
Chicago or California or Colorado or Florida or Georgia or Illinois or Indiana or Minnesota or Missouri or Montana or New Jersey or New York or North Carolina or Ohio or Oregon or Pennsylvania or South Carolina or Texas or Utah or Vermont or Virginia or Washington or Washington or Wisconsin
$210k-$260k/yr HybridFull Time
7+ YOE7+ years in application/product/security engineering; hands-on threat modeling, vulnerability management, secure design, CI/CD integration, automation using Python/Go; experience with cloud-native AWS/GCP environments.
AWS, GCP, Python, Go, SAST, SCA, DAST, CI/CD, AI/LLMs
1mo
Save
Mark Applied
Hide
Workday Application Security & Controls Manager
Atlanta or Tampa or Charlotte or Austin or Chicago or Washington or Dallas or Los Angeles or Boston or Florham Park or New York or San Francisco or California or Philadelphia or Houston
$99k-$232k/yr OnsiteFull Time
4+ YOEBachelor's degree, 4+ years of experience, strong Workday application security and compliance skills, analytical thinking, leadership and mentoring experience; SAP experience noted as a specialism.
Workday, SAP
1w
Save
Mark Applied
Hide
Cloud Security Application Control Owner
Denver or Washington or Chicago
$92k-$145k/yr OnsiteFull Time
Experience with public cloud platforms (Azure, AWS, GCP), cloud security controls, application lifecycle governance, compliance tracking, Change/Incident/Problem management, and strong communication.
Azure, AWS, GCP, Jira, Confluence, ServiceNow, Horizon
1w
Save
Mark Applied
Hide
Cloud Security Application Control Owner
Denver or Washington or Chicago
$92k-$145k/yr OnsiteFull Time
5+ YOERequires 5+ years experience managing cloud/security applications, knowledge of Azure/AWS/GCP, DevOps/CI-CD/IaC, ServiceNow, Jira/Confluence, strong communication and compliance skills.
Azure, AWS, GCP, Jira, Confluence, ServiceNow, Horizon
2mo
Save
Mark Applied
Hide
ZERO TRUST (ZT) APPLICATION DEVELOPMENT SECURITY SME (VIRTUALIZATION AND APPLICATION DEVELOPMENT SME)
Arlington or Springfield
HybridFull Time
10+ YOE10+ years in application security, cloud security, or DevSecOps with Zero Trust experience; hands-on ZT policy design and enforcement in cloud environments; strong NIST/OMB/OEA/EO-based standards.
Azure, AWS, GCP, Kubernetes, Docker, API security, CI/CD, NIST SP 800-53 SA, NIST SP 800-53 SI, NIST SP 800-53 CM, NIST SP 800-207, EO 14028
3w
Save
Mark Applied
Hide
Lead Security Application Engineer
Alexandria, Virginia, United States
$115k-$150k/yr OnsiteFull Time
4+ YOE4+ years VMS/PSIM experience, team leadership, networking and video streaming expertise, Microsoft SQL Server/SQL skills, active U.S. Secret clearance, and ability to travel up to 50% OCONUS.
Surveill, VMS, PSIM, Microsoft SQL Server, SQL, TCP/IP, h.264, h.265, Multicast, Unicast
1mo
Save
Mark Applied
Hide
ZERO TRUST (ZT) APPLICATION DEVELOPMENT SECURITY SME (VIRTUALIZATION AND APPLICATION DEVELOPMENT SME)
Arlington or Springfield
HybridFull Time
10+ YOE10+ years in application/cloud/DevSecOps security with Zero Trust experience, Secret clearance, CISSP or CCSP, expertise with CISA ZTMM v2.0 and NIST standards, cloud platforms (Azure/AWS/GCP), API security, Kubernetes, and CI/CD.
Azure, AWS, GCP, Kubernetes, Docker, CI/CD
2w
Save
Mark Applied
Hide
Technical Security Application Engineer, Secured Spaces
Washington, District of Columbia, United States
$146k-$194k/yr OnsiteFull Time
5+ YOE5+ years progressive technical security experience, active SECRET clearance, knowledge of ICD-705/IC Tech Spec, commissioning IDS/ACS, proficiency with accreditation and AO interaction, strong communication and problem solving.
Lattice OS, Lenel OnGuard, Genetec, DMP, Bosch
1mo
Save
Mark Applied
Hide
SAP Application Security Lead - U.S. Citizenship Required
Fairfax or Lafayette or Lebanon or Knoxville
$101k-$246k/yr HybridFull Time
9+ YOE5+ MgmtU.S. citizen required. Minimum 9 years SAP security experience and 5 years leading IT programs; experience with SAP security architecture, GRC, BTP, role-based authorization; strong communication and analytical skills.
SAP S/4HANA, S/4HANA Private Cloud, RISE, SAP GRC, SAP BTP, Microsoft Excel, Microsoft Project, Microsoft PowerPoint
2d
Save
Mark Applied
Hide
Application Architect
Arlington, Virginia, United States
OnsiteFull Time
9+ YOE2+ MgmtBachelor's degree, 9+ years in application architecture or related fields, 2+ years supervising technical teams, U.S. citizenship and ability to obtain security clearance, experience with cloud, APIs, SDLC, and application modernization.
Microsoft Azure, Amazon Web Services (AWS), Google Cloud Platform (GCP), DevSecOps, CI/CD, TOGAF, FEAF, Zachman, Zero Trust, Identity and Access Management (IAM)