105 application security manager jobs at 68 companies in Washington, DC

PromotedHiringCafe
Founding Backend / Infra Engineer
Cupertino, CA, US
$160k-$300k/yr On-SiteFull Time
HiringCafe
HiringCafe: Building a 100× better job search engine to take on Indeed and LinkedIn.
Own the crawlers, pipelines, and infrastructure powering a real-time job search engine. Strong Node.js and Python fundamentals; bonus points for security and reverse-engineering chops.
Node.js, Python, Elasticsearch, Redis
1w
Save
Mark Applied
Hide
Sr. Manager, Application Security
Bethesda or United States
$110k-$190k/yr HybridFull Time
Marriott International
Marriott InternationalNASDAQ: MAR: Operates and franchises a global network of hotels and resorts.
7+ YOE4+ Mgmt7+ years IT/security experience with 4+ years security leadership, bachelor\u0002s degree or equivalent, experience with AppSec testing (SAST/DAST/IAST), SCA, release management, and GitHub/JIRA/ServiceNow/Jenkins/Harness.
GitHub, JIRA, ServiceNow, Jenkins, Harness, SAST, DAST, IAST, SCA, OWASP, MITRE CVE/CWE
1mo
Save
Mark Applied
Hide
Workday Application Security & Controls Manager
Atlanta or Tampa or Charlotte or Austin or Chicago or Washington or Dallas or Los Angeles or Boston or Florham Park or New York or San Francisco or California or Philadelphia or Houston
$99k-$232k/yr OnsiteFull Time
PwC
PwC: Providing audit, tax, and management consulting services to businesses.
4+ YOEBachelor's degree, 4+ years of experience, strong Workday application security and compliance skills, analytical thinking, leadership and mentoring experience; SAP experience noted as a specialism.
Workday, SAP
4w
Save
Mark Applied
Hide
Application Security Engineer
Tysons, Virginia, United States
HybridFull Time
Veilant
Veilant: Protecting operations, personnel, and data from emerging surveillance threats.
2+ YOEAbility to obtain security clearance; 2+ years Java development; experience with Java Spring Boot, Angular, REST APIs, SQL/PostgreSQL, JWT/OAuth; hands-on web security testing (Burp Suite); CI/CD (GitLab CI, Azure DevOps, GitHub Actions); Kubernetes and container/runtime security; familiarity with SAST/DAST/SCA and secrets management.
Java, Java Spring Boot, Angular, REST APIs, SQL, PostgreSQL, JWT, OAuth, Entra, Keycloak, Burp Suite, GitLab CI, Azure DevOps, GitHub Actions, Kubernetes, Trivy, Kubesec, Falco, NeuVector, GitLab Secrets Manager, AWS KMS, Azure Key Vault, Ansible Vault, SAST, DAST, SCA, IaC, CI/CD
2w
Save
Mark Applied
Hide
Staff Security Engineer, Application Security
Chicago or California or Colorado or Florida or Georgia or Illinois or Indiana or Minnesota or Missouri or Montana or New Jersey or New York or North Carolina or Ohio or Oregon or Pennsylvania or South Carolina or Texas or Utah or Vermont or Virginia or Washington or Washington or Wisconsin
$210k-$260k/yr HybridFull Time
NinjaTrader
NinjaTrader: Provides futures brokerage services and a trading software platform.
7+ YOE7+ years in application/product/security engineering; hands-on threat modeling, vulnerability management, secure design, CI/CD integration, automation using Python/Go; experience with cloud-native AWS/GCP environments.
AWS, GCP, Python, Go, SAST, SCA, DAST, CI/CD, AI/LLMs
3mo
Save
Mark Applied
Hide
ISAP NS2 Application Security-Onsite - Chantilly, VA (Herndon, VA, US, 20171)
Herndon or Chantilly
$131k-$272k/yr OnsiteFull Time
SAP
SAPFrankfurt Stock Exchange: SAP: Sells enterprise resource planning and business management software solutions.
4+ YOE4-10 years of SAP application security experience; design and manage SAP roles; upgrade and transform projects; SOX/SOD knowledge; on-site; US citizenship with TS/SCI clearance; BA/BS degree.
SAP, SAP S/4HANA, Security and Access Control
1mo
Save
Mark Applied
Hide
Application Project Manager
Reston or Riverdale or Washington
$135k-$216k/yr OnsiteFull Time
Peraton
Peraton: National security and mission-critical government technology services provider.
8+ YOE4+ MgmtActive TS/SCI with polygraph (or ability to obtain), bachelor’s +10 yrs or master’s +8 yrs (or +4 yrs experience in lieu), 4+ yrs supervisory experience, experience leading multi-disciplinary teams, cybersecurity and systems integration expertise, onsite work in secure facility.
3d
Save
Mark Applied
Hide
Associate Security Analyst (Application Security) Contractual -ITDSGGR
Washington, District of Columbia, United States
OnsiteContract
International Monetary Fund
International Monetary Fund: Provides loans and policy advice to stabilize global economies.
Experience in application security or vulnerability management, familiarity with OWASP/NIST, knowledge of secure SDLC, programming/scripting (Java, Python, .NET), strong communication and coordination skills; advanced degree or equivalent experience preferred.
SAST, DAST, SCA, CI/CD, Java, Python, .NET, ServiceNow, Azure DevOps, Microsoft Azure, Power BI
1w
Save
Mark Applied
Hide
Lead Security Application Engineer
Alexandria, Virginia, United States
$115k-$150k/yr OnsiteFull Time
3SI Security Systems
3SI Security Systems: Provides GPS tracking and surveillance for asset protection.
4+ YOE4+ years VMS/PSIM experience, team leadership, networking and video streaming expertise, Microsoft SQL Server/SQL skills, active U.S. Secret clearance, and ability to travel up to 50% OCONUS.
Surveill, VMS, PSIM, Microsoft SQL Server, SQL, TCP/IP, h.264, h.265, Multicast, Unicast
2w
Save
Mark Applied
Hide
Security Automation Application Engineer
Linthicum Heights, Maryland, United States
$104k-$218k/yr OnsiteFull Time
CACI International
CACI InternationalNYSE: CACI: Provides information technology and engineering services for government agencies.
Active TS/SCI with polygraph, strong analytics development background, proficiency in Python, experience with system authorization, RMF, and vulnerability management; multi-year technical experience as specified by education.
Python, Pig, PySpark, AWS Lambda, Nessus Vulnerability Scanner, Risk Management Framework (RMF)
3d
Save
Mark Applied
Hide
Security Analyst/Sr. Security Analyst (Application Security)-ITDSGGR (Contractual)
Washington, District of Columbia, United States
OnsiteFull Time
International Monetary Fund
International Monetary Fund: Fosters global monetary cooperation and secures international financial stability.
4+ YOEAdvanced degree in computer science/cybersecurity plus 4 years (or bachelor's plus 10 years). Experience in application security, vulnerability management, secure SDLC, OWASP/NIST/ISO frameworks, SAST/DAST/SCA, and programming (Java, Python, .NET, PowerShell).
OWASP Top 10, NIST SSDF, NIST CSF, ISO 27001, Java, Python, .NET, PowerShell, SAST, DAST, SCA, ServiceNow, Microsoft Azure, Azure DevOps, Power BI, Burp Suite, Sonatype Nexus Lifecycle, Checkmarx, Fortify, HCL AppScan, Veracode
2w
Save
Mark Applied
Hide
Security Automation Application Engineer
Linthicum, Maryland, United States
$104k-$218k/yr OnsiteFull Time
CACI
CACINYSE: CACI: Provides information technology and professional services to government clients.
Active TS/SCI with Polygraph; strong analytics development background; proficiency in Python; experience with RMF, system authorization, and vulnerability management (e.g., Nessus); 4+ years experience typical depending on degree.
Python, Pig, PySpark, AWS Lambda, Nessus Vulnerability Scanner
3w
Save
Mark Applied
Hide
SAP Application Security Lead - U.S. Citizenship Required
Fairfax or Lafayette or Lebanon or Knoxville
$101k-$246k/yr HybridFull Time
CGI
CGINYSE: GIB: Provides information technology and business consulting services.
9+ YOE5+ MgmtU.S. citizen required. Minimum 9 years SAP security experience and 5 years leading IT programs; experience with SAP security architecture, GRC, BTP, role-based authorization; strong communication and analytical skills.
SAP S/4HANA, S/4HANA Private Cloud, RISE, SAP GRC, SAP BTP, Microsoft Excel, Microsoft Project, Microsoft PowerPoint
4w
Save
Mark Applied
Hide
Application Project Manager
Quantico, Virginia, United States
$150k-$170k/yr OnsiteFull Time
ECS
ECSNYSE: ASGN: Provides advanced technology and engineering services to government agencies.
8+ YOE3+ MgmtActive Top Secret clearance, onsite work at secure federal facilities, 8+ years IT operations/program management experience with 3+ years technical management, experience with SLAs/KPIs, ITSM, leadership, and strong communication skills.
1mo
Save
Mark Applied
Hide
Lead Application Architect
Suitland, Maryland, United States
OnsiteFull Time
Onyx Government Services
Onyx Government Services: Provides data analytics and IT services for federal agencies.
15+ YOEDesign secure multi-cloud application architectures, define standards and reference architectures, lead application lifecycle alignment with Zero Trust, API management, and brief senior stakeholders. Requires US citizenship, bachelor\u0002s degree and 15+ years of architecture experience.
AWS, Azure, Google Cloud, Zero Trust Architecture (ZTA), CI/CD, DevSecOps, microservices, Infrastructure as Code (IaC), serverless, containerization, API management, FinOps
1w
Save
Mark Applied
Hide
Senior Manager, Application Software Engineering
Reston or Austin or Seattle
$118k-$264k/yr OnsiteFull Time
Oracle
OracleNYSE: ORCL: Provides cloud infrastructure and enterprise software for global businesses.
9+ YOEU.S. citizenship with active TS/SCI+Poly clearance; ~9+ years software development; 6 years programming/scripting; 4 years databases; experience leading engineering teams and secure production software.
Oracle Cloud Infrastructure, AWS, Azure, Google Cloud
2mo
Save
Mark Applied
Hide
Business Application / ERP Administrator
Columbia, Maryland, United States
$97k-$100k/yr OnsiteFull Time
Shimadzu Scientific Instruments
Shimadzu Scientific InstrumentsTokyo Stock Exchange: 7701: Manufactures and sells analytical and measuring instruments for laboratories.
5+ YOEManage Microsoft Dynamics Great Plains, administer SQL Server, and support finance, procurement, and supply chain applications while ensuring data security and compliance.
Microsoft Dynamics Great Plains, SQL Server, SQL, Crystal Reports, SQL Server Reporting Services, Citrix
1mo
Save
Mark Applied
Hide
Senior Security Engineer
Austin or Bochum or Dubai or Geneva or London or Singapore or Tokyo or Washington
OnsiteFull Time
Sonar
Sonar: Provides automated tools for code quality and security analysis.
Senior-level security engineering experience with cloud (AWS), application security, vulnerability management, DLP, scripting/automation (Python or Bash), and experience assessing SaaS/security tools (Wiz, CrowdStrike). Strong communication skills.
AWS, Python, Bash, Wiz, CrowdStrike, Google Workspace, GitHub Copilot, Claude Code, Codex, Cursor, Gemini, Devin, SonarQube, SonarQube Foundation Agent, SonarSweep, Sonar Context Augmentation, DLP
1d
Save
Mark Applied
Hide
IT Specialist (Application Developer)
Washington, District of Columbia, United States
$144k-$187k/yr OnsiteFull Time
Federal Communications Commission
Federal Communications Commission: Regulates communications via radio, television, wire, satellite, and cable.
1+ YOEOne year specialized IT experience equivalent to GS-13 designing, developing, testing, deploying, modernizing, and maintaining enterprise applications using low-code, cloud-native, microservices, APIs, CI/CD and DevSecOps; ensures security, accessibility, and operational support; mentors developers.
low-code, cloud-native, microservices, APIs, CI/CD, DevSecOps
3w
Save
Mark Applied
Hide
Senior SAP Application Administrator
Fort Belvoir, Virginia, United States
RemoteFull Time
Cardinal Technology Systems
Cardinal Technology Systems: Provides cybersecurity and IT solutions to government agencies.
6+ YOERequires IT-II clearance or NACLC, 6+ years industry experience, 3-6 years SAP GRC or SAP application security experience, ability to lead projects and mentor junior admins.
SAP GRC, SAP
1w
Save
Mark Applied
Hide
Application Engineer 4
Linthicum Heights, Maryland, United States
$88-$119/hr OnsiteFull Time
Wyetech
Wyetech: Provides professional engineering services for government and commercial sectors.
4+ YOETS/SCI with agency-appropriate polygraph required. Multiple years technical experience (4+ minimum depending on degree). Experience with cloud security, virtualization, and system/network architectures.
Computer-Aided Software Engineering (CASE), AWS, Azure, Google Cloud, IAM, AWS Key Management Service, AWS Config, AWS Security Hub, GuardDuty, Inspector