66 appsec jobs at 44 companies in Alexandria, VA

3w
Save
Mark Applied
Hide
Senior Product Manager, AppSec
McLean or Richmond or San Jose or New York City or Plano
$209k-$286k/yr OnsiteFull Time
Capital One
Capital OneNYSE: COF: A diversified financial services providing banking and credit products.
6+ YOERequires 6+ years in cybersecurity or IT, 3+ years translating security strategy into product requirements, and 3+ years in application security. High school diploma or GED required; bachelor's degree preferred.
SAST, DAST, SCA, DevSecOps, AppSec, AI agents, SDLC, SLA, CISSP, CISM, OSCP, APIs, Web, Mobile, Containers, IaC, CI/CD, OWASP Top 10, Slack, Penetration Testing
1mo
Save
Mark Applied
Hide
Staff AppSec Engineer
Washington or United States
$210k-$230k/yr RemoteFull Time
Upside
Upside: Personalized cashback rewards platform for everyday brick-and-mortar purchases.
6+ YOE6+ years in application/product security, hands-on Python code review, vulnerability management, deep AWS security experience (Lambda, Control Tower), experience integrating AI tools, strong communication; Bachelor's preferred.
GitHub Advanced Security, GitHub Actions, GitHub Copilot, Python, Terraform, AWS, AWS Lambda, DynamoDB, S3, SNS, SQS, IAM, VPCs, AWS Control Tower, ChatGPT, Snowflake, SQL
1mo
Save
Mark Applied
Hide
Web Application Security Engineer (AppSec / DevSecOps)
Washington, District of Columbia, United States
HybridFull Time
Essnova Solutions
Essnova Solutions: Provides professional and technical services to government entities.
Experience in application security, secure SDLC, vulnerability assessment, WAF, CI/CD/DevSecOps integration, and familiarity with federal frameworks (NIST, FedRAMP); Public Trust clearance or ability to obtain.
SAST, DAST, Software Composition Analysis (SCA), Web Application Firewall (WAF), CI/CD, DevSecOps, AWS, Microsoft Azure, OWASP Top 10, NIST, FedRAMP
1mo
Save
Mark Applied
Hide
Sr. Manager, Application Security
Bethesda or United States
$110k-$190k/yr HybridFull Time
Marriott International
Marriott InternationalNASDAQ: MAR: Operates and franchises a global network of hotels and resorts.
7+ YOE4+ Mgmt7+ years IT/security experience with 4+ years security leadership, bachelor\u0002s degree or equivalent, experience with AppSec testing (SAST/DAST/IAST), SCA, release management, and GitHub/JIRA/ServiceNow/Jenkins/Harness.
GitHub, JIRA, ServiceNow, Jenkins, Harness, SAST, DAST, IAST, SCA, OWASP, MITRE CVE/CWE
2mo
Save
Mark Applied
Hide
Enterprise Cybersecurity Product Analyst
McLean, Virginia, United States
$87k-$198k/yr OnsiteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
3+ YOE3+ years in product/security/appsec roles; experience with architecture/design reviews, threat modeling, secure-by-design principles; ability to obtain Secret clearance; Bachelor's degree required; strong communication and tracking skills.
1mo
Save
Mark Applied
Hide
Security Architect
Washington or Cleveland or California or Colorado or Hawaii or Illinois or Maine or Maryland or Massachusetts or Minnesota or New Jersey or New York or Vermont or Virginia or Washington
$135k-$279k/yr OnsiteFull Time
Accenture Federal Services
Accenture Federal ServicesNYSE: ACN: Provides technology and consulting services to U.S. federal agencies.
12+ YOE12+ years progressive cybersecurity experience with leadership across SOC, incident response, detection, vulnerability management, engineering, and AppSec; enterprise security program experience; US citizenship and clearance eligibility; up to 25% travel.
NIST, RMF, Zero Trust, AWS, Microsoft Azure, GCP, SOAR, AI, ML
1mo
Save
Mark Applied
Hide
Web Developer Security Engineer
Washington, District of Columbia, United States
HybridFull Time
CMT Services
CMT Services: Provides management and technology consulting to government entities.
3+ YOE3+ years in web application security/AppSec/SSDLC, hands-on secure development, DevSecOps automation, WAF and FIM management, log/SIEM analysis, OWASP Top 10 mitigation, scripting for automation, and compliance with NIST/FedRAMP.
GitHub Copilot, OpenAI API/Codex, Python, JavaScript/Node.js, Java, React.js, TypeScript, .NET (C# MVC, WCF), HTML5, CSS3, JavaScript, REST APIs, SQL, Wireshark, SIEM, IDS/IPS, NDR, EDR, WAF, File Integrity Monitoring (FIM)
2w
Save
Mark Applied
Hide
DevSecOps Engineer (Secret Clearance)
Washington, District of Columbia, United States
$108k-$188k/yr OnsiteFull Time
Deloitte
Deloitte: Provides professional audit, consulting, advisory, and tax services.
4+ YOEBachelor's in CS/cyber/IT/engineering/math,local to DMV with ability to work onsite up to 5 days/week,4+ years DevSecOps,4+ years CI/CD (Jenkins/GitLab CI/GitHub Actions/Azure DevOps),3+ cloud/IaC,2+ appsec integration,US work authorization required.
Jenkins, GitLab CI, GitHub Actions, Azure DevOps, Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), Terraform, AWS CloudFormation, Ansible, Docker, Kubernetes, OpenShift, SonarQube, Snyk, Prisma Cloud, Aqua, Python, PowerShell, Bash, Go
1mo
Save
Mark Applied
Hide
Senior DevOps Engineer (US REMOTE)
Waltham or Culver City or Richmond or West Valley City or Lexington or Little Rock or Allen or Phoenix or Mesa or Scottsdale or Beltsville or Birmingham or Chicago or Brentwood or Plantation or Schaumburg or Atlanta
$140k-$170k/yr RemoteFull Time
Motorola Solutions
Motorola SolutionsNYSE: MSI: Provides mission-critical communications and public safety technology.
8+ YOEU.S. citizen required. 8+ years cloud infrastructure experience, 5+ years software engineering, 2+ years Kubernetes/Docker. Experience with AWS, Terraform, Helm, MySQL, CI/CD, Git, Linux/Bash, and security/compliance frameworks; ability to obtain required security clearance.
Terraform, Helm, MySQL, Kubernetes, CI/CD, GitHub, BitBucket, Azure DevOps, Git, Linux, Bash, Docker, AWS, WireShark, TCPDump, SNGrep, nslookup, SIP/RTP, Artifactory, Sonar, Gradle, Prometheus/Grafana, ELK Stack, OWASP, NIST, CIS, Prisma Cloud/Twistlock, Mend/WhiteSource, Java
1w
Save
Mark Applied
Hide
Vulnerability Assessment & Penetration Testing Specialist ? Level III (DC, Washington)
Washington, District of Columbia, United States
OnsiteFull Time
RiVidium
RiVidium: Provides cybersecurity software and IT services to federal agencies.
7+ YOEActive TS/SCI clearance, 7+ years penetration testing and vulnerability assessment experience in federal/IC environments, CEH and CISSP required, bachelor\u0002s in relevant discipline, secure code review and cloud security experience.
MITRE ATT&CK, OWASP, NIST, PTES, Burp Suite Professional, Nessus, ACAS, Nmap, Metasploit Framework, Wireshark, Kali Linux, WebInspect, Nikto, SonarQube, GitLab Security, Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), DISA Security Technical Implementation Guides (STIGs), Docker, Kubernetes, AWS, Azure, Google Cloud
2w
Save
Mark Applied
Hide
ICAM Architect (Identity, Credential, and Access Management)
Alexandria, Virginia, United States
$150k-$180k/yr HybridFull Time
UberEther
UberEther: Provides identity management and compliance solutions for federal agencies.
10+ YOEUS citizen with active Secret clearance,10+ years in engineering/architecture/consulting focused on zero trust and ICAM,experience with multiple ICAM products,knowledge of FEA/TOGAF/OWASP/UML,and strong communication skills.
Radiant Logic, Ping, Nok Nok, SailPoint, CyberArk, BeyondTrust, ForgeRock, Federal Enterprise Architecture (FEA), TOGAF, Zachmann Framework, OWASP, UML, J2EE, JSP, Servlets
3w
Save
Mark Applied
Hide
Staff AI Security Engineer
Bellevue or Chicago or New York City or San Francisco or Washington
$161k-$248k/yr HybridFull Time
Okta
OktaNASDAQ: OKTA: Provide secure identity management and authentication for enterprises.
8+ YOE8+ years in security engineering or backend development, expertise in AI threat landscape, strong coding in Python or Go, cloud (AWS/GCP) experience, and leadership/mentorship ability.
Python, Go, LangChain, Strands, Claude Agent SDK, AWS, GCP, OWASP, MITRE ATLAS, NIST AI RMF
5d
Save
Mark Applied
Hide
Application Security Engineer (Full Scope Poly)
Reston, Virginia, United States
OnsiteFull Time
Concept Plus
Concept Plus: Delivers enterprise IT services for federal government agencies.
8+ YOERequires U.S. citizenship, TS/SCI clearance with polygraph, 8+ years in application security or related fields, bachelor's degree, secure SDLC and cloud-native experience, and proficiency with listed security technologies and standards.
Oracle Cloud, Python, JavaScript, SQL, Shell, PL/SQL, SAST, DAST, SCA, Kubernetes, Docker, REST APIs, CI/CD, Oracle Cloud Infrastructure (OCI), NIST RMF, NIST Secure Software Development Framework, OWASP, DISA STIGs, Oracle RDBMS, Agile
3w
Save
Mark Applied
Hide
Cleared Penetration Tester
Herndon or Seattle
$130k-$160k/yr HybridFull Time
Fortreum
Fortreum: Provides cybersecurity compliance and technical auditing services for regulated industries.
3+ YOEActive Top Secret clearance or ability to obtain,3+ years web application and network penetration testing,2+ years professional services experience,proficient with scripting (bash,python,PowerShell,ruby),knowledge of OWASP/MITRE ATT&CK/OSSTMM/PTES.
bash, python, PowerShell, ruby, OWASP, MITRE ATT&CK, OSSTMM, PTES
2mo
Save
Mark Applied
Hide
Penetration Tester
Herndon, Virginia, United States
$130k-$145k/yr HybridFull Time
Dark Wolf Solutions
Dark Wolf Solutions: Provides cybersecurity and software development services to defense agencies.
2+ YOEBachelor’s degree in cybersecurity, information technology, computer engineering, or related field; 2+ years in multiple security domains; cloud proficiency (AWS, Azure, GCP); embedded/IoT testing; strong reporting; OWASP/web app testing; NIST 800-53 knowledge; US citizenship with active Secret clearance.
AWS, Azure, GCP, OWASP, NIST
1mo
Save
Mark Applied
Hide
Senior Microelectronics Engineer
Alexandria, Virginia, United States
OnsiteFull Time
Modern Technology Solutions, Inc.
Modern Technology Solutions, Inc.: Provides engineering, technology, and cybersecurity services for national security.
10+ YOE10+ years technical leadership in semiconductor R&D; experience in integrated circuit and embedded system design, micro-electronics analysis, system security, cryptography/key management, testing and evaluation; current TS/SCI clearance and MS in related field.
Field-programmable gate array (FPGA), ASIC verification, Microcode, Software Security
2w
Save
Mark Applied
Hide
Identity and Access Management (IAM) Senior Consultant
Washington or Denver or Boston
$140k-$200k/yr OnsiteFull Time
Bank of America
Bank of AmericaNYSE: BAC: Provides banking, investment, and financial risk management services.
10+ YOE10+ years in IAM, information security, cloud or related disciplines in large regulated organizations; deep IAM and public cloud knowledge; experience with AI identity risks, vendor assessments, and executive communication.
AWS, Microsoft Azure, Google Cloud Platform, NIST, COBIT, ISO 27001, MITRE ATLAS, OWASP
3w
Save
Mark Applied
Hide
Senior Security Engineer, AI/ML, National Security, Public Sector
Washington or Fort Meade or Maryland
$174k-$253k/yr OnsiteFull Time
Google
GoogleNASDAQ: GOOGL: Provides online search, advertising, cloud computing, and consumer electronics.
5+ YOEBachelor's in CS/Data Science/AI or equivalent,5+ years in AI/ML or software development,5+ years with Docker,Kubernetes,Python and ML libraries,active Top Secret/SCI clearance with polygraph,ability to travel up to 25%.
Docker, Kubernetes, Python, PyTorch, TensorFlow, Hugging Face Transformers, vLLM, NVIDIA Triton, Ollama, Google Vertex AI, Google Cloud Platform (GCP), MITRE ATLAS, OWASP, STRIDE
2mo
Save
Mark Applied
Hide
Junior Software Developer
Springfield or Arlington
$40k-$80k/yr HybridFull Time
JRAD
JRAD: Provides technical research and defense support to federal agencies.
0+ YOEBachelor's in CS or related, 0-3 years software development experience, Java/Spring preferred, proficiency with OOP, data structures, REST/microservices, databases, containerization, Agile, and security standards; able to pass DHS suitability screening.
Java, C#, C++, ASP.Net, Python, JavaScript, Spring MVC, Spring Boot, SSO, Scala, Http4s, ETL, Node.js, React, Angular, Vue.js, PostgreSQL, MySQL, MongoDB, RESTful APIs, microservices, Docker, Kubernetes, Git, Github, JIRA, SAFe, AWS, Microsoft Azure, Google Cloud Platform, Jenkins, GitLab CI/CD, GitHub Actions, JUnit, PyTest, Jest, OWASP, Section 508, NIST
2mo
Save
Mark Applied
Hide
Senior Security Code Reviewer
Camp Springs, Maryland, United States
$175k-$205k/yr HybridFull Time
Ashburn Consulting
Ashburn Consulting: Provides network engineering and cybersecurity services for government agencies.
10+ YOEU.S. citizen; willing to work as W-2; DHS EOD/suitability; 10+ years in application security, DevSecOps, zero trust; experience with APT testing tools; cloud and on-prem security; AWS; Terraform/Kubernetes; security governance and compliance; strong writing and mentoring.
Checkmarx, ZTNA, SWG, AWS, Terraform, Kubernetes, Palo Alto, AlgoSec, Gigamon, Corelight, SAST, DAST, SCA, CI/CD, OWASP, NIST