241 application security jobs at 116 companies in Virginia

PromotedHiringCafe
Founding Backend / Infra Engineer
Cupertino, CA, US
$160k-$300k/yr On-SiteFull Time
HiringCafe
HiringCafe: Building a 100× better job search engine to take on Indeed and LinkedIn.
Own the crawlers, pipelines, and infrastructure powering a real-time job search engine. Strong Node.js and Python fundamentals; bonus points for security and reverse-engineering chops.
Node.js, Python, Elasticsearch, Redis
2mo
Save
Mark Applied
Hide
Application Security Engineer 3
Arlington, Virginia, United States
OnsiteFull Time
Bloomberg Industry Group
Bloomberg Industry Group: Provides legal, tax, and government intelligence and news services.
5+ YOELead application security engineering, design scalable security architectures, perform risk assessments, integrate security across the SDLC, and drive automation.
Python, Java, JavaScript, SAST, DAST, SCA, IaC, Container, Cloud Security, Kubernetes, DevSecOps
1mo
Save
Mark Applied
Hide
Application Security Engineer
Richmond or Lynchburg
OnsiteFull Time
Genworth Financial
Genworth FinancialNYSE: GNW: Provides insurance products for aging care and mortgage protection.
5+ YOE5+ years in security engineering with application security/DevSecOps, cloud experience (AWS/Azure/GCP), vulnerability scanning/AST, threat modeling, scripting/programming, and a Computer Science or similar degree.
AST, vulnerability scanning technologies, cloud security tooling, AWS, Azure, GCP, Infrastructure as Code (IaaC), Policy as Code (PaC), CI/CD, SOC2, ISO 27001, NIST 800-53, Java, .NET, HTML, Ruby, PHP, Perl, C#, Python, JavaScript, PowerShell, Bash
2mo
Save
Mark Applied
Hide
Staff, Application Security Engineer - Product Security
Bentonville or Herndon
$110k-$220k/yr OnsiteFull Time
Walmart
WalmartNYSE: WMT: Multinational retail operating discount stores and supermarkets.
4+ YOE4+ years application security experience with Bachelor's or 6+ years without; expertise in secure architecture, threat modeling, SAST/SCA, OWASP, automation of security validation, and strong communication skills.
SAST, SCA, OWASP
1mo
Save
Mark Applied
Hide
Senior Application Security Engineer
Seattle or Los Angeles or San Francisco or California or Colorado or Connecticut or Delaware or Hawaii or Illinois or Maine or Maryland or Massachusetts or Minnesota or Nevada or New Jersey or New York or Rhode Island or Virginia or Washington or Washington DC or United States
$141k-$259k/yr OnsiteFull Time
Nordstrom
Nordstrom: Operates luxury department stores and off-price retail outlets.
4+ YOE4+ years in application security or related field; experience shipping security tooling and automation; expert threat modeling, security design review, and manual code review; fluent reading/writing code in Java, Kotlin, C#, or Python; cloud-native and LLM/AI security knowledge.
Java, Kotlin, C#, Python, SAST, SCA, DAST, secrets scanning, GitHub Advanced Security, JFrog Artifactory, AWS, GCP, Azure, Kubernetes, LLM
1mo
Save
Mark Applied
Hide
Application Security Engineer
Tysons, Virginia, United States
HybridFull Time
Veilant
Veilant: Protecting operations, personnel, and data from emerging surveillance threats.
2+ YOEAbility to obtain security clearance; 2+ years Java development; experience with Java Spring Boot, Angular, REST APIs, SQL/PostgreSQL, JWT/OAuth; hands-on web security testing (Burp Suite); CI/CD (GitLab CI, Azure DevOps, GitHub Actions); Kubernetes and container/runtime security; familiarity with SAST/DAST/SCA and secrets management.
Java, Java Spring Boot, Angular, REST APIs, SQL, PostgreSQL, JWT, OAuth, Entra, Keycloak, Burp Suite, GitLab CI, Azure DevOps, GitHub Actions, Kubernetes, Trivy, Kubesec, Falco, NeuVector, GitLab Secrets Manager, AWS KMS, Azure Key Vault, Ansible Vault, SAST, DAST, SCA, IaC, CI/CD
2w
Save
Mark Applied
Hide
Staff Security Engineer, Application Security
Chicago or California or Colorado or Florida or Georgia or Illinois or Indiana or Minnesota or Missouri or Montana or New Jersey or New York or North Carolina or Ohio or Oregon or Pennsylvania or South Carolina or Texas or Utah or Vermont or Virginia or Washington or Washington or Wisconsin
$210k-$260k/yr HybridFull Time
NinjaTrader
NinjaTrader: Provides futures brokerage services and a trading software platform.
7+ YOE7+ years in application/product/security engineering; hands-on threat modeling, vulnerability management, secure design, CI/CD integration, automation using Python/Go; experience with cloud-native AWS/GCP environments.
AWS, GCP, Python, Go, SAST, SCA, DAST, CI/CD, AI/LLMs
1w
Save
Mark Applied
Hide
Senior Associate, Application Security, DevSecOps
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yr OnsiteFull Time
KPMG
KPMG: Global professional services network providing audit, tax, and advisory.
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
Java, C#, JavaScript, Python, SQL, CI/CD, SAST, DAST, Azure, OWASP
2mo
Save
Mark Applied
Hide
ZERO TRUST (ZT) APPLICATION DEVELOPMENT SECURITY SME (VIRTUALIZATION AND APPLICATION DEVELOPMENT SME)
Arlington or Springfield
HybridFull Time
Zermount
Zermount: Provider of cybersecurity and IT solutions to government agencies.
10+ YOE10+ years in application security, cloud security, or DevSecOps with Zero Trust experience; hands-on ZT policy design and enforcement in cloud environments; strong NIST/OMB/OEA/EO-based standards.
Azure, AWS, GCP, Kubernetes, Docker, API security, CI/CD, NIST SP 800-53 SA, NIST SP 800-53 SI, NIST SP 800-53 CM, NIST SP 800-207, EO 14028
3mo
Save
Mark Applied
Hide
ISAP NS2 Application Security-Onsite - Chantilly, VA (Herndon, VA, US, 20171)
Herndon or Chantilly
$131k-$272k/yr OnsiteFull Time
SAP
SAPFrankfurt Stock Exchange: SAP: Sells enterprise resource planning and business management software solutions.
4+ YOE4-10 years of SAP application security experience; design and manage SAP roles; upgrade and transform projects; SOX/SOD knowledge; on-site; US citizenship with TS/SCI clearance; BA/BS degree.
SAP, SAP S/4HANA, Security and Access Control
3mo
Save
Mark Applied
Hide
SAP Application Security Consultant – Onsite in Kingstowne, VA
Kingstowne, Virginia, United States
$117k-$243k/yr OnsiteFull Time
Accenture Federal Services
Accenture Federal ServicesNYSE: ACN: Provides technology and consulting services to U.S. federal agencies.
7+ YOE7+ years SAP Application Security experience; US citizenship; ability to obtain Secret clearance; onsite work in VA.
SAP
1w
Save
Mark Applied
Hide
Lead Security Application Engineer
Alexandria, Virginia, United States
$115k-$150k/yr OnsiteFull Time
3SI Security Systems
3SI Security Systems: Provides GPS tracking and surveillance for asset protection.
4+ YOE4+ years VMS/PSIM experience, team leadership, networking and video streaming expertise, Microsoft SQL Server/SQL skills, active U.S. Secret clearance, and ability to travel up to 50% OCONUS.
Surveill, VMS, PSIM, Microsoft SQL Server, SQL, TCP/IP, h.264, h.265, Multicast, Unicast
1w
Save
Mark Applied
Hide
Sr AWS Application Security Engineer, ADC AppSec
Arlington or Seattle
$178k-$227k/yr OnsiteFull Time
Amazon
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
4+ YOE4+ years troubleshooting systems and security issues, experience identifying vulnerabilities and remediation, mentoring or tech lead experience; threat modeling and service/microservices security preferred.
1mo
Save
Mark Applied
Hide
ZERO TRUST (ZT) APPLICATION DEVELOPMENT SECURITY SME (VIRTUALIZATION AND APPLICATION DEVELOPMENT SME)
Arlington or Springfield
HybridFull Time
Zermount
Zermount: Provides cybersecurity and IT consulting services to government agencies.
10+ YOE10+ years in application/cloud/DevSecOps security with Zero Trust experience, Secret clearance, CISSP or CCSP, expertise with CISA ZTMM v2.0 and NIST standards, cloud platforms (Azure/AWS/GCP), API security, Kubernetes, and CI/CD.
Azure, AWS, GCP, Kubernetes, Docker, CI/CD
4w
Save
Mark Applied
Hide
SAP Application Security Lead - U.S. Citizenship Required
Fairfax or Lafayette or Lebanon or Knoxville
$101k-$246k/yr HybridFull Time
CGI
CGINYSE: GIB: Provides information technology and business consulting services.
9+ YOE5+ MgmtU.S. citizen required. Minimum 9 years SAP security experience and 5 years leading IT programs; experience with SAP security architecture, GRC, BTP, role-based authorization; strong communication and analytical skills.
SAP S/4HANA, S/4HANA Private Cloud, RISE, SAP GRC, SAP BTP, Microsoft Excel, Microsoft Project, Microsoft PowerPoint
1mo
Save
Mark Applied
Hide
Application Security Engineer - Mid-Atlantic region (Remote in VA, MD, PA, NC, DE, NJ, or DC)
Virginia or Maryland or Pennsylvania or North Carolina or Delaware or New Jersey or District of Columbia or United States
RemoteFull Time
GuidePoint Security
GuidePoint Security: Provides cybersecurity consulting, managed services, and integrated technology solutions.
5+ YOE5+ years security engineering experience, proficiency with SAST tools, CI/CD integration, software engineering background, scripting/automation skills, application security fundamentals (OWASP Top 10, threat modeling), strong communication.
Semgrep, Snyk, CodeQL, Checkmarx, Veracode, GitHub Actions, GitLab Runners, Azure DevOps, Jenkins, CircleCI, IAST, DAST, SCA, NoName, Traceable, Salt, Cequence, Burp Suite, OWASP Top 10, Greenhouse Software, Zoom Scheduler
3mo
Save
Mark Applied
Hide
Software Application Specialist
Illinois or Kentucky or North Carolina or Washington or Massachusetts or Georgia or Pennsylvania or Virginia or Alabama or Oklahoma or Florida or New York or Arkansas or South Carolina or Texas
$60k-$80k/yr RemoteFull Time
Motorola Solutions
Motorola SolutionsNYSE: MSI: Provides mission-critical communications and public safety technology.
3+ YOE3+ years in Public Safety, Business Analysis, Field Service, CAD, Record Management Systems, or Jail Applications; US work authorization; ability to obtain government background clearance; CJIS security considerations; 25-50% travel.
Windows, SQL Server Reporting Services (SSRS), XML, Google Docs/Sheets
3w
Save
Mark Applied
Hide
Application Developer
Reston, Virginia, United States
OnsiteFull Time
ASRC Federal
ASRC Federal: Provides engineering and IT services to federal government agencies.
2+ YOEU.S. citizenship with ability to obtain security clearance; Bachelor's in CS/Engineering; 2+ years software development; proficiency with Java, JavaScript, relational databases, Git, HTML/CSS/JSON/XML; strong analytical and communication skills.
Java, JavaScript, PostgreSQL, Oracle, Git, HTML, CSS, JSON, XML, XSLT, XSD, Python, Android, Jenkins, Jira, Confluence, REST, SOAP
1w
Save
Mark Applied
Hide
Application Administrator, Senior (Top Secret)
Fairfax, Virginia, United States
OnsiteFull Time
Praescient Analytics
Praescient Analytics: Provides data analytics and intelligence for national security missions.
10+ YOEActive Top Secret/SCI clearance, CompTIA Security+ and A+, 10+ years application administration, AWS and Java EE experience, Oracle and Linux/Windows familiarity, CI/CD and monitoring tool experience.
OPIS, AWS, Java EE, Oracle, Linux, Windows, FileNet, Spring Batch, Splunk, ELK, CloudWatch, Active Directory, GitLab, EC2, S3, IAM, CI/CD
3d
Save
Mark Applied
Hide
Application Developer
Fairfax, Virginia, United States
RemoteFull Time
Kreative Technologies
Kreative Technologies: Provides IT modernization and cybersecurity services for federal government agencies.
5+ YOEBachelor's degree required; DoD position of trust or ability to gain clearance; Security+ preferred; 5+ years IBM/HCL Domino experience; 2+ years Visual Basic, SQL, Access, ASP/ASP.NET, HTML, DHTML, JavaScript, Lotus Script; ColdFusion and MS SQL experience.
IBM, HCL Domino, VSIMS, SQL, ASP.Net, HTML, Visual Basic, Access, ASP/ASP.NET, DHTML, JavaScript, Lotus Script, ColdFusion, MS SQL, PKI
3w
Save
Mark Applied
Hide
Senior SAP Application Administrator
Fort Belvoir, Virginia, United States
RemoteFull Time
Cardinal Technology Systems
Cardinal Technology Systems: Provides cybersecurity and IT solutions to government agencies.
6+ YOERequires IT-II clearance or NACLC, 6+ years industry experience, 3-6 years SAP GRC or SAP application security experience, ability to lead projects and mentor junior admins.
SAP GRC, SAP