69 appsec jobs at 44 companies in College Park, MD
3w
Save
Mark Applied
Hide
Senior Product Manager, AppSec
McLean or Richmond or San Jose or New York City or Plano
$209k-$286k/yr OnsiteFull Time
6+ YOERequires 6+ years in cybersecurity or IT, 3+ years translating security strategy into product requirements, and 3+ years in application security. High school diploma or GED required; bachelor's degree preferred.
SAST, DAST, SCA, DevSecOps, AppSec, AI agents, SDLC, SLA, CISSP, CISM, OSCP, APIs, Web, Mobile, Containers, IaC, CI/CD, OWASP Top 10, Slack, Penetration Testing
1mo
Save
Mark Applied
Hide
Staff AppSec Engineer
Washington or United States
$210k-$230k/yr RemoteFull Time
6+ YOE6+ years in application/product security, hands-on Python code review, vulnerability management, deep AWS security experience (Lambda, Control Tower), experience integrating AI tools, strong communication; Bachelor's preferred.
GitHub Advanced Security, GitHub Actions, GitHub Copilot, Python, Terraform, AWS, AWS Lambda, DynamoDB, S3, SNS, SQS, IAM, VPCs, AWS Control Tower, ChatGPT, Snowflake, SQL
1mo
Save
Mark Applied
Hide
Web Application Security Engineer (AppSec / DevSecOps)
Washington, District of Columbia, United States
HybridFull Time
Experience in application security, secure SDLC, vulnerability assessment, WAF, CI/CD/DevSecOps integration, and familiarity with federal frameworks (NIST, FedRAMP); Public Trust clearance or ability to obtain.
SAST, DAST, Software Composition Analysis (SCA), Web Application Firewall (WAF), CI/CD, DevSecOps, AWS, Microsoft Azure, OWASP Top 10, NIST, FedRAMP
1mo
Save
Mark Applied
Hide
Sr. Manager, Application Security
Bethesda or United States
$110k-$190k/yr HybridFull Time
7+ YOE4+ Mgmt7+ years IT/security experience with 4+ years security leadership, bachelor\u0002s degree or equivalent, experience with AppSec testing (SAST/DAST/IAST), SCA, release management, and GitHub/JIRA/ServiceNow/Jenkins/Harness.
GitHub, JIRA, ServiceNow, Jenkins, Harness, SAST, DAST, IAST, SCA, OWASP, MITRE CVE/CWE
2mo
Save
Mark Applied
Hide
Enterprise Cybersecurity Product Analyst
McLean, Virginia, United States
$87k-$198k/yr OnsiteFull Time
3+ YOE3+ years in product/security/appsec roles; experience with architecture/design reviews, threat modeling, secure-by-design principles; ability to obtain Secret clearance; Bachelor's degree required; strong communication and tracking skills.
1mo
Save
Mark Applied
Hide
Security Architect
Washington or Cleveland or California or Colorado or Hawaii or Illinois or Maine or Maryland or Massachusetts or Minnesota or New Jersey or New York or Vermont or Virginia or Washington
$135k-$279k/yr OnsiteFull Time
12+ YOE12+ years progressive cybersecurity experience with leadership across SOC, incident response, detection, vulnerability management, engineering, and AppSec; enterprise security program experience; US citizenship and clearance eligibility; up to 25% travel.
NIST, RMF, Zero Trust, AWS, Microsoft Azure, GCP, SOAR, AI, ML
1mo
Save
Mark Applied
Hide
Web Developer Security Engineer
Washington, District of Columbia, United States
HybridFull Time
3+ YOE3+ years in web application security/AppSec/SSDLC, hands-on secure development, DevSecOps automation, WAF and FIM management, log/SIEM analysis, OWASP Top 10 mitigation, scripting for automation, and compliance with NIST/FedRAMP.
GitHub Copilot, OpenAI API/Codex, Python, JavaScript/Node.js, Java, React.js, TypeScript, .NET (C# MVC, WCF), HTML5, CSS3, JavaScript, REST APIs, SQL, Wireshark, SIEM, IDS/IPS, NDR, EDR, WAF, File Integrity Monitoring (FIM)
2w
Save
Mark Applied
Hide
DevSecOps Engineer (Secret Clearance)
Washington, District of Columbia, United States
$108k-$188k/yr OnsiteFull Time
4+ YOEBachelor's in CS/cyber/IT/engineering/math,local to DMV with ability to work onsite up to 5 days/week,4+ years DevSecOps,4+ years CI/CD (Jenkins/GitLab CI/GitHub Actions/Azure DevOps),3+ cloud/IaC,2+ appsec integration,US work authorization required.
Jenkins, GitLab CI, GitHub Actions, Azure DevOps, Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), Terraform, AWS CloudFormation, Ansible, Docker, Kubernetes, OpenShift, SonarQube, Snyk, Prisma Cloud, Aqua, Python, PowerShell, Bash, Go
1mo
Save
Mark Applied
Hide
Lead Penetration Tester
Fort Collins or Kansas City or Washington
$130k-$150k/yr FieldFull Time
5+ YOEBachelor's or equivalent,5+ years penetration testing with federal experience,CISA AES required or in process,active Secret clearance,FedRAMP pen testing experience,ability to travel to agency sites.
OWASP, NIST SP 800, DISA STIG, FedRAMP, AWS, Azure, GCP, GovCloud
1mo
Save
Mark Applied
Hide
Senior DevOps Engineer (US REMOTE)
Waltham or Culver City or Richmond or West Valley City or Lexington or Little Rock or Allen or Phoenix or Mesa or Scottsdale or Beltsville or Birmingham or Chicago or Brentwood or Plantation or Schaumburg or Atlanta
$140k-$170k/yr RemoteFull Time
8+ YOEU.S. citizen required. 8+ years cloud infrastructure experience, 5+ years software engineering, 2+ years Kubernetes/Docker. Experience with AWS, Terraform, Helm, MySQL, CI/CD, Git, Linux/Bash, and security/compliance frameworks; ability to obtain required security clearance.
Terraform, Helm, MySQL, Kubernetes, CI/CD, GitHub, BitBucket, Azure DevOps, Git, Linux, Bash, Docker, AWS, WireShark, TCPDump, SNGrep, nslookup, SIP/RTP, Artifactory, Sonar, Gradle, Prometheus/Grafana, ELK Stack, OWASP, NIST, CIS, Prisma Cloud/Twistlock, Mend/WhiteSource, Java
6d
Save
Mark Applied
Hide
Senior Software Security Engineer- Cloud/GovCloud (Top Secret cleared)
Reston, Virginia, United States
$119k-$203k/yr RemoteFull Time
5+ YOEActive Top Secret clearance and 5+ years in application security, secure software development, or cybersecurity engineering; AWS cloud experience, secure code review, vulnerability assessment, and a technical bachelor's degree preferred.
AWS, AWS GovCloud, SAST, DAST, SCA, OWASP, NIST, DoD STIGs
3d
Save
Mark Applied
Hide
Quality Assurance Manager
Arlington, Virginia, United States
$94k-$198k/yr HybridFull Time
7+ YOEBachelor's degree required; 7+ years leading software QA in Agile environments; SDLC, DevSecOps, testing, quality tools, metrics, federal standards, and Secret clearance required.
SonarQube, Fortify, CAST, Azure DevOps, Jira, NIST, OWASP, Section 508, DevSecOps, Software Development Lifecycle (SDLC), Independent Verification & Validation (IV&V), User Acceptance Testing (UAT), CI/CD
2d
Save
Mark Applied
Hide
Enterprise Cybersecurity Vulnerability Analyst, Senior
McLean, Virginia, United States
$87k-$198k/yr HybridFull Time
4+ YOERequires 4+ years in vulnerability analysis, 2+ years administering Windows and UNIX, cloud security experience, vulnerability tools, networking knowledge, and ability to obtain Secret clearance.
Tenable Cloud Security, Tenable Security Center, AWS, Microsoft Azure, Google Cloud Platform, Nessus, Qualys, Splunk, OWASP, TCP, IP, UDP, HTTP, HTTPS, SSH, DNS, Windows, UNIX
3d
Save
Mark Applied
Hide
Quality Assurance Manager
Arlington, Virginia, United States
$94k-$198k/yr HybridFull Time
7+ YOEBachelor's degree in a relevant technical field, 7+ years leading software QA in Agile environments, DevSecOps and testing expertise, quality tools experience, and active or obtainable Secret clearance.
SonarQube, Fortify, CAST, Azure DevOps, Jira, NIST, OWASP, Section 508, DevSecOps, Software Development Lifecycle (SDLC), Independent Verification & Validation (IV&V), User Acceptance Testing (UAT), CI/CD
3mo
Save
Mark Applied
Hide
Software Engineer, Full Stack (Remote)
Arlington, Virginia, United States
RemoteFull Time
3+ YOE3+ years full-stack web development; React/TypeScript frontend; Python backend with REST APIs; RBAC, security, and CI/CD.
React, TypeScript, Next.js, Python, REST APIs, WebSockets, OAuth2, OIDC, Docker, CI/CD, OWASP, RBAC
1w
Save
Mark Applied
Hide
Software Engineer - Mid to Experienced Level (Maryland)
Fort Meade, Maryland, United States
$105k-$193k/yr OnsiteFull Time
3+ YOEComputer Science or Software Engineering degree with foundational CS coursework and relevant software development experience; requirements vary from 0 to 8 years by education and work level. Top Secret clearance required.
COBOL, C, C++, Java, Angular, React, Python, PIG Analytics, Pyspark, Docker, Kubernetes, Amazon Web Services (AWS), Linux, VMWare, ElasticSearch, Rust, Ansible, GitLab, NIST, ISO 27001, OWASP, TLS/SSL, Security Information and Event Management (SIEM), intrusion detection systems (IDS), hardware security modules (HSMs)
2mo
Save
Mark Applied
Hide
Senior Security Code Reviewer
Camp Springs, Maryland, United States
$175k-$205k/yr HybridFull Time
10+ YOEU.S. citizen; willing to work as W-2; DHS EOD/suitability; 10+ years in application security, DevSecOps, zero trust; experience with APT testing tools; cloud and on-prem security; AWS; Terraform/Kubernetes; security governance and compliance; strong writing and mentoring.
Checkmarx, ZTNA, SWG, AWS, Terraform, Kubernetes, Palo Alto, AlgoSec, Gigamon, Corelight, SAST, DAST, SCA, CI/CD, OWASP, NIST
2w
Save
Mark Applied
Hide
Identity and Access Management (IAM) Senior Consultant
Boston or Washington or Denver
$140k-$200k/yr OnsiteFull Time
10+ YOE10+ years in IAM or related disciplines, deep knowledge of cloud IAM (AWS, Microsoft Azure, Google Cloud Platform), generative AI identity risks, comparative technology assessments, security frameworks, and strong stakeholder communication.
AWS, Microsoft Azure, Google Cloud Platform, NIST AI Risk Management Framework, NIST Cybersecurity Framework, MITRE ATLAS, OWASP
2w
Save
Mark Applied
Hide
Cyber Security Engineer 3
Bethesda, Maryland, United States
OnsiteFull Time
6+ YOEActive TS/SCI clearance, 6+ years cybersecurity experience, DoD 8570.01-M IAT/IASAE Level II certification, RMF/DoD security knowledge, vulnerability scanning and mitigation, EMASS/XACTA familiarity.
SCAP, STIG Viewer, ACAS, OWASP, Fortify, SonarQube, Tenable, XACTA, eMASS, Microsoft Windows, Linux/UNIX, Python, Java, React, GitLab, Jira, Confluence, OIDC, OAuth2, Kubernetes, Rancher, Strimzi, Cloudera, Active Directory, Bash, PowerShell
3mo
Save
Mark Applied
Hide
SOC Analyst
Fairfax, Virginia, United States
OnsiteFull Time
5+ YOE5+ years in Cyber Security with security event monitoring and incident response; degree in IT; CISSP/CISM/CySA+/GCIH desired.
Tenable, Splunk, Microsoft Defender, SIEM, Symantec DLP, Netsparker, Penetration Testing, ServiceNow, Web Application Security, Data Loss Prevention, Incident Response, Forensics, Security Tool Evaluation, Endpoint Protection