39 appsec engineer jobs at 28 companies in Camp Springs, MD

1w
Save
Mark Applied
Hide
Security Engineer, AWS AppSec
Herndon or Seattle
$136k-$184k/yr OnsiteFull Time
Amazon
AmazonNASDAQ: AMZN: Multinational technology focused on e-commerce and cloud computing.
Bachelor's degree in engineering, computer science, or related field; security engineering experience; web security knowledge; coding or scripting ability; and experience with application security, testing, or incident response.
AWS, Java, C++, Python
2mo
Save
Mark Applied
Hide
Staff AppSec Engineer
Washington or United States
$210k-$230k/yr RemoteFull Time
Upside
Upside: Private digital marketplace helping consumers earn cash back from gas, grocery, and dining retailers.
6+ YOE6+ years in application/product security, hands-on Python code review, vulnerability management, deep AWS security experience (Lambda, Control Tower), experience integrating AI tools, strong communication; Bachelor's preferred.
GitHub Advanced Security, GitHub Actions, GitHub Copilot, Python, Terraform, AWS, AWS Lambda, DynamoDB, S3, SNS, SQS, IAM, VPCs, AWS Control Tower, ChatGPT, Snowflake, SQL
2mo
Save
Mark Applied
Hide
Web Application Security Engineer (AppSec / DevSecOps)
Washington, District of Columbia, United States
HybridFull Time
Essnova Solutions
Essnova Solutions: Minority-owned Alabama small-business government contractor delivering IT, professional, geospatial, healthcare, and environmental services to public and commercial clients.
Experience in application security, secure SDLC, vulnerability assessment, WAF, CI/CD/DevSecOps integration, and familiarity with federal frameworks (NIST, FedRAMP); Public Trust clearance or ability to obtain.
SAST, DAST, Software Composition Analysis (SCA), Web Application Firewall (WAF), CI/CD, DevSecOps, AWS, Microsoft Azure, OWASP Top 10, NIST, FedRAMP
2w
Save
Mark Applied
Hide
Observability Engineer
McLean, Virginia, United States
$87k-$198k/yr OnsiteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Global firm providing management, technology, and engineering consulting services.
5+ YOE5+ years in enterprise observability, monitoring, and SRE; Dynatrace, AIOps, Python, JavaScript, Node.js, Terraform, dashboards, SLOs/SLAs, Agile, and network monitoring expertise; bachelor's degree and U.S. citizenship required.
Dynatrace, Python, JavaScript, Node.js, Terraform, ServiceNow Event Management, Flow Designer, IntegrationHub, Glide API, HTML, CSS, Grail, Smartscape, Davis AI, OpenPipeline, DQL, Workflow Automation, Platform API, AppSec, Session Replay, OpenTelemetry, Prometheus, Grafana, ELK, EFK, AWS GovCloud, Azure Government, AWS, Azure, GCP, Splunk, Splunk Enterprise Security, Cribl, SolarWinds, SNMP, SNMP traps, NetFlow, Syslog, CMDB
2mo
Save
Mark Applied
Hide
Senior Microelectronics Engineer
Alexandria, Virginia, United States
OnsiteFull Time
Modern Technology Solutions, Inc.
Modern Technology Solutions, Inc.: Engineering services and technology solutions for national security.
10+ YOE10+ years technical leadership in semiconductor R&D; experience in integrated circuit and embedded system design, micro-electronics analysis, system security, cryptography/key management, testing and evaluation; current TS/SCI clearance and MS in related field.
Field-programmable gate array (FPGA), ASIC verification, Microcode, Software Security
1mo
Save
Mark Applied
Hide
DevSecOps Engineer (Secret Clearance)
Washington, District of Columbia, United States
$108k-$188k/yr OnsiteFull Time
Deloitte
Deloitte: Global professional services network providing audit, consulting, tax, and advisory services.
4+ YOEBachelor's in CS/cyber/IT/engineering/math,local to DMV with ability to work onsite up to 5 days/week,4+ years DevSecOps,4+ years CI/CD (Jenkins/GitLab CI/GitHub Actions/Azure DevOps),3+ cloud/IaC,2+ appsec integration,US work authorization required.
Jenkins, GitLab CI, GitHub Actions, Azure DevOps, Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), Terraform, AWS CloudFormation, Ansible, Docker, Kubernetes, OpenShift, SonarQube, Snyk, Prisma Cloud, Aqua, Python, PowerShell, Bash, Go
2d
Save
Mark Applied
Hide
Application Security Engineer
Reston, Virginia, United States
OnsiteFull Time
Bespoke Technologies, Inc.
Bespoke Technologies, Inc.: Woman-owned U.S. technology consultancy delivering digital transformation, engineering, mission operations, and IT solutions to national-security customers.
8+ YOERequires active Poly clearance, 8+ years in application security, software engineering, DevSecOps, or cybersecurity, and a bachelor's degree in engineering, computer science, or related technical field.
Python, JavaScript, SQL, Shell, PL/SQL, SAST, DAST, SCA, Kubernetes, Docker, REST APIs, CI/CD, Oracle Cloud Infrastructure (OCI), NIST RMF, NIST Secure Software Development Framework, OWASP, DISA STIGs, Oracle RDBMS, Agile, CISSP, CSSLP, Security+, GIAC, CEH, OSCP
2w
Save
Mark Applied
Hide
Principal Security Engineer
Reston, Virginia, United States
$200k-$269k/yr HybridFull Time
Fannie Mae
Fannie MaeOTCQB: FNMA: Government-sponsored mortgage finance that buys residential loans and issues mortgage-backed securities for U.S. homebuyers and renters.
8+ YOEBachelor's degree and 8+ years in cybersecurity or related engineering. Requires multi-cloud security expertise across AWS, Google Cloud, and Microsoft Azure, infrastructure security, automation, application security, AI security, and cross-functional leadership.
AWS, Google Cloud, Microsoft Azure, Terraform, CloudFormation, Bicep, ARM templates, Python, Go, Java, JavaScript, TypeScript, C#, PowerShell, Bash, Ruby, SIEM, EDR, CSPM, CWPP, CIEM, DSPM, Kubernetes, NIST Cybersecurity Framework, NIST 800-53, CIS Benchmarks, ISO 27001, SOC 2, PCI DSS, OWASP, MITRE ATT&CK, MITRE ATLAS
3w
Save
Mark Applied
Hide
Distinguished Engineer, AI Threat Defense
Eagan or Frisco or New York City or Richmond or San Francisco or Los Angeles or Irvine or McLean or Washington
$198k-$368k/yr HybridFull Time
Thomson Reuters
Thomson ReutersTSX, NASDAQ: TRI: Global provider of trusted information, software, and news.
12+ YOE12+ years of cybersecurity engineering experience at Principal, Staff, or Distinguished Engineer level, with AI threat defense, production AI systems, mature SOC/CIRT, enterprise security architecture, and technical influence expertise.
Model Context Protocol (MCP), SIEM, SOAR, SAST, AppSec, AWS, Azure, GCP, LLM
1mo
Save
Mark Applied
Hide
Staff AI Security Engineer
Bellevue or Chicago or New York City or San Francisco or Washington
$161k-$248k/yr HybridFull Time
Okta
OktaNASDAQ: OKTA: Identity management and access control software provider.
8+ YOE8+ years in security engineering or backend development, expertise in AI threat landscape, strong coding in Python or Go, cloud (AWS/GCP) experience, and leadership/mentorship ability.
Python, Go, LangChain, Strands, Claude Agent SDK, AWS, GCP, OWASP, MITRE ATLAS, NIST AI RMF
1w
Save
Mark Applied
Hide
Customer Success Engineer - America
Austin or Barcelona or Bochum or Dubai or Geneva or London or Singapore or Tokyo or Washington, D.C.
OnsiteFull Time
SonarSource
SonarSource: Sonar analyzes code for quality and security.
Hands-on DevOps, software engineering, or platform experience with CI/CD and Git; strong business, communication, analytical, and customer-facing skills. English fluency required; Spanish or Portuguese desirable.
Claude Code, Codex, Cursor, GitHub Copilot, Gemini, Devin, SonarQube, SonarSweep, Sonar Context Augmentation, CI/CD, Git, Java, Linux, SAST, AppSec
1w
Save
Mark Applied
Hide
Cyber Security Engineer 4
Bethesda, Maryland, United States
OnsiteFull Time
Base-2 Solutions
Base-2 Solutions: Federal technology provider supporting national security and intelligence missions.
10+ YOEBachelor's or master's degree with 10 years of experience, active TS/SCI clearance, DoD IASAE Level II certification, vulnerability management, RMF, secure architecture, and systems engineering expertise.
RMF, SDLC, SCAP, STIG Viewer, ACAS, OWASP, Fortify, SonarQube, Tenable, XACTA, eMASS, Microsoft Windows, Linux/UNIX, TCP/IP, CI/CD, Python, Java, React, GitLab, Jira, Confluence, OIDC, OAuth2, Kubernetes, Rancher, Strimzi, Cloudera, Active Directory, Bash, PowerShell
2mo
Save
Mark Applied
Hide
Senior DevOps Engineer (US REMOTE)
Waltham or Culver City or Richmond or West Valley City or Lexington or Little Rock or Allen or Phoenix or Mesa or Scottsdale or Beltsville or Birmingham or Chicago or Brentwood or Plantation or Schaumburg or Atlanta
$140k-$170k/yr RemoteFull Time
Motorola Solutions
Motorola SolutionsNYSE: MSI: Global leader in mission-critical communications and security technology.
8+ YOEU.S. citizen required. 8+ years cloud infrastructure experience, 5+ years software engineering, 2+ years Kubernetes/Docker. Experience with AWS, Terraform, Helm, MySQL, CI/CD, Git, Linux/Bash, and security/compliance frameworks; ability to obtain required security clearance.
Terraform, Helm, MySQL, Kubernetes, CI/CD, GitHub, BitBucket, Azure DevOps, Git, Linux, Bash, Docker, AWS, WireShark, TCPDump, SNGrep, nslookup, SIP/RTP, Artifactory, Sonar, Gradle, Prometheus/Grafana, ELK Stack, OWASP, NIST, CIS, Prisma Cloud/Twistlock, Mend/WhiteSource, Java
2w
Save
Mark Applied
Hide
Observability Engineer
McLean, Virginia, United States
$87k-$198k/yr OnsiteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Global firm providing management, technology, and engineering consulting services.
5+ YOERequires 5+ years in enterprise observability, monitoring, and SRE; Dynatrace, AIOps, Python, JavaScript, Node.js, Terraform, dashboards, SLOs/SLAs, networking protocols, mentoring, and a bachelor's degree. U.S. citizenship required.
Dynatrace, Python, JavaScript, Node.js, Terraform, SNMP, SNMP traps, NetFlow, Syslog, ServiceNow Event Management, Flow Designer, IntegrationHub, HTML, CSS, Grail, Smartscape, Davis AI, OpenPipeline, DQL, Workflow Automation, Platform API, AppSec, Session Replay, OpenTelemetry, Prometheus, Grafana, ELK, EFK, AWS GovCloud, Azure Government, AWS, Azure, GCP, Splunk, Splunk Enterprise Security, Cribl, SolarWinds, Glide API, Dynatrace Assist, MCP Server, Dynatrace Apps, App Toolkit, ServiceNow, CMDB
1w
Save
Mark Applied
Hide
Staff Security Engineer
McLean or Taipei or Canberra or Middle East
FieldFull Time
Orbis Operations
Orbis Operations: Defense and intelligence firm delivering technology, integration, training, and expertise to governments, allies, and critical enterprises.
7+ YOERequires 7+ years shaping platform security, deep mTLS/TLS and authorization architecture experience, Go and protobuf/gRPC fluency, threat modeling, strong communication, and technical direction experience.
OIDC, OAuth2, SAML, RBAC, ABAC, mTLS, SPIFFE/SPIRE, SCA, SAST, HashiCorp Vault, KMS, VPCs, IAM, Cedar, OPA, Go, protobuf/gRPC, TLS, JWT, x509, OWASP, ISO 27001, NIST, SOC 2
1w
Save
Mark Applied
Hide
Sr. DevSecOps Engineer II
Reston, Virginia, United States
$170k-$190k/yr OnsiteFull Time
M9 Solutions
M9 Solutions: Delivering the digital future
7+ YOERequires 7+ years of DevSecOps experience, active TS/SCI clearance with CI polygraph, IAT Level 2 certification, AWS, CI/CD, IaC, Linux, containerization, scripting, security compliance, and troubleshooting expertise.
GitLab CI, Jenkins, Artifactory, SonarQube, Prisma Cloud, Python, Bash, Linux, RHEL, Oracle Linux, Terraform, CloudFormation, Ansible, GitLab Service Desk, ServiceNow, AWS, Amazon EC2, Amazon S3, IAM, Amazon RDS, OWASP, NIST, OpenSCAP, Docker, OpenShift
2mo
Save
Mark Applied
Hide
Jr Salesforce Developer
Herndon or United States
RemoteFull Time
BDR Solutions
BDR Solutions: Service-disabled veteran-owned small IT services firm modernizing health, social-service, and disaster-relief systems for U.S. federal agencies.
3+ YOEBachelor's in IT/Information Systems (or 5 years' experience), 3+ years' experience, Salesforce Admin & Developer certs required, proficient in Apex, Visualforce, LWC, SOQL/SOSL, JavaScript, MuleSoft, Copado, APIs, and Agile/SAFe; U.S. citizenship and clearance eligibility required.
Apex, Visualforce, Lightning, Lightning Web Components, SOQL, SOSL, JavaScript, SOAP, REST, MuleSoft, Copado, Salesforce, SharePoint, JAWS, Microsoft Azure, OWASP, GitHub, SSDT, MS SSRS
2mo
Save
Mark Applied
Hide
Junior Software Developer
Springfield or Arlington
$40k-$80k/yr HybridFull Time
JRAD
JRAD: Swiss private-equity firm launching a CHF 100 million energy fund for investors.
0+ YOEBachelor's in CS or related, 0-3 years software development experience, Java/Spring preferred, proficiency with OOP, data structures, REST/microservices, databases, containerization, Agile, and security standards; able to pass DHS suitability screening.
Java, C#, C++, ASP.Net, Python, JavaScript, Spring MVC, Spring Boot, SSO, Scala, Http4s, ETL, Node.js, React, Angular, Vue.js, PostgreSQL, MySQL, MongoDB, RESTful APIs, microservices, Docker, Kubernetes, Git, Github, JIRA, SAFe, AWS, Microsoft Azure, Google Cloud Platform, Jenkins, GitLab CI/CD, GitHub Actions, JUnit, PyTest, Jest, OWASP, Section 508, NIST
2d
Save
Mark Applied
Hide
Sr. DevSecOps Engineer I (6737)
Reston, Virginia, United States
$150k-$170k/yr OnsiteFull Time
MetroStar
MetroStar: AI-enabled technology services provider delivering transformation, cybersecurity, and modernization solutions to U.S. defense and national-security agencies.
7+ YOEActive TS/SCI with CI Poly, IAT Level 2 certification, and 7+ years of DevSecOps experience. Requires CI/CD, AWS, Linux, scripting, IaC, containers, security compliance, and customer support expertise.
GitLab CI, Jenkins, CloudFormation, AWS, Linux, grep, awk, tail, EC2, RDS, Security Groups, Keycloak, GitLab, Docker, OpenShift, Prisma Cloud, Python, Bash, Terraform, Ansible, Artifactory, SonarQube, RHEL, Oracle Linux, ServiceNow, S3, IAM, OWASP, NIST, OpenSCAP
3mo
Save
Mark Applied
Hide
Software Engineer, Full Stack (Remote)
Arlington, Virginia, United States
RemoteFull Time
Quantum Computing Inc.
Quantum Computing Inc.The Nasdaq Stock Market LLC: QUBT: Public U.S. photonics serving commercial and government customers with room-temperature quantum machines and photonic systems.
3+ YOE3+ years full-stack web development; React/TypeScript frontend; Python backend with REST APIs; RBAC, security, and CI/CD.
React, TypeScript, Next.js, Python, REST APIs, WebSockets, OAuth2, OIDC, Docker, CI/CD, OWASP, RBAC