34 appsec engineer jobs at 30 companies in Gainesville, VA

2mo
Save
Mark Applied
Hide
Lead AppSec Engineer
Los Angeles or Washington or United States
$150k-$220k/yr RemoteFull Time
Virtualitics
Virtualitics: Provides an AI-native platform for readiness and analytics.
Technical leadership in application security with hands-on AI/ML experience, threat modeling, cloud and container security (AWS/GCP/Azure, Docker, Kubernetes), familiarity with SAST/DAST/container scanning and security platforms (Wiz, Snyk, GitHub Advanced Security), and experience designing secure AI workflows.
Claude Code, Cursor, AWS, GCP, Azure, Docker, Kubernetes, Wiz, Snyk, GitHub Advanced Security, SAST, DAST, container scanning, CI/CD
1mo
Save
Mark Applied
Hide
Staff AppSec Engineer
Washington or United States
$210k-$230k/yr RemoteFull Time
Upside
Upside: Personalized cashback rewards platform for everyday brick-and-mortar purchases.
6+ YOE6+ years in application/product security, hands-on Python code review, vulnerability management, deep AWS security experience (Lambda, Control Tower), experience integrating AI tools, strong communication; Bachelor's preferred.
GitHub Advanced Security, GitHub Actions, GitHub Copilot, Python, Terraform, AWS, AWS Lambda, DynamoDB, S3, SNS, SQS, IAM, VPCs, AWS Control Tower, ChatGPT, Snowflake, SQL
1mo
Save
Mark Applied
Hide
Web Application Security Engineer (AppSec / DevSecOps)
Washington, District of Columbia, United States
HybridFull Time
Essnova Solutions
Essnova Solutions: Provides professional and technical services to government entities.
Experience in application security, secure SDLC, vulnerability assessment, WAF, CI/CD/DevSecOps integration, and familiarity with federal frameworks (NIST, FedRAMP); Public Trust clearance or ability to obtain.
SAST, DAST, Software Composition Analysis (SCA), Web Application Firewall (WAF), CI/CD, DevSecOps, AWS, Microsoft Azure, OWASP Top 10, NIST, FedRAMP
1w
Save
Mark Applied
Hide
Senior Cloud Engineer
Washington, District of Columbia, United States
OnsiteFull Time
OneGlobe
OneGlobe: Provides IT solutions and cloud engineering to federal agencies.
8+ YOEU.S. citizenship for DHS suitability, 8+ years cloud/platform engineering experience with AWS, containers, CI/CD, security (FISMA High/OWASP), strong communication and mentorship skills.
AWS, Serverless, Kubernetes, Docker, ECS, VMWare, Jenkins, GitLab CI, Git, SQL, NoSQL, OWASP
1mo
Save
Mark Applied
Hide
Senior Microelectronics Engineer
Alexandria, Virginia, United States
OnsiteFull Time
Modern Technology Solutions, Inc.
Modern Technology Solutions, Inc.: Provides engineering, technology, and cybersecurity services for national security.
10+ YOE10+ years technical leadership in semiconductor R&D; experience in integrated circuit and embedded system design, micro-electronics analysis, system security, cryptography/key management, testing and evaluation; current TS/SCI clearance and MS in related field.
Field-programmable gate array (FPGA), ASIC verification, Microcode, Software Security
4d
Save
Mark Applied
Hide
Web Developer Security Engineer
Chantilly or United States
$120k-$135k/yr OnsiteFull Time
Applied Intellect
Applied Intellect: Provides professional, technical, and human services to government agencies.
3+ YOE3+ years in web application or application security, proficiency with .NET/C#, modern web stacks, WAF/FIM, log analysis, DevSecOps automation, and current AppSec/offensive/foundational certifications; bachelor\u0002s degree required.
.NET, C#, MVC, WCF, HTML5, CSS3, JavaScript, REST APIs, SQL, GitHub Copilot, OpenAI API/Codex, Python, Node.js, Java, React.js, TypeScript, OWASP Top 10, WAF, FIM, Wireshark, SIEM, IDS/IPS, NDR, EDR, Docker, Kubernetes, AWS
3w
Save
Mark Applied
Hide
Web Developer Security Engineer
Washington, District of Columbia, United States
HybridFull Time
CMT Services
CMT Services: Provides management and technology consulting to government entities.
3+ YOE3+ years in web application security/AppSec/SSDLC, hands-on secure development, DevSecOps automation, WAF and FIM management, log/SIEM analysis, OWASP Top 10 mitigation, scripting for automation, and compliance with NIST/FedRAMP.
GitHub Copilot, OpenAI API/Codex, Python, JavaScript/Node.js, Java, React.js, TypeScript, .NET (C# MVC, WCF), HTML5, CSS3, JavaScript, REST APIs, SQL, Wireshark, SIEM, IDS/IPS, NDR, EDR, WAF, File Integrity Monitoring (FIM)
1w
Save
Mark Applied
Hide
Senior Security Engineer, AI/ML, National Security, Public Sector
Washington or Fort Meade or Maryland
$174k-$253k/yr OnsiteFull Time
Google
GoogleNASDAQ: GOOGL: Provides online search, advertising, cloud computing, and consumer electronics.
5+ YOEBachelor's in CS/Data Science/AI or equivalent,5+ years in AI/ML or software development,5+ years with Docker,Kubernetes,Python and ML libraries,active Top Secret/SCI clearance with polygraph,ability to travel up to 25%.
Docker, Kubernetes, Python, PyTorch, TensorFlow, Hugging Face Transformers, vLLM, NVIDIA Triton, Ollama, Google Vertex AI, Google Cloud Platform (GCP), MITRE ATLAS, OWASP, STRIDE
3d
Save
Mark Applied
Hide
Application Security Engineer
Tysons, Virginia, United States
$92k-$124k/yr HybridFull Time
Veilant
Veilant: Protecting operations, personnel, and data from emerging surveillance threats.
2+ YOE2+ years Java development, hands-on AppSec testing, secure code review, CI/CD and container security experience, ability to obtain security clearance.
Burp Suite, Java Spring Boot, Angular, REST, PostgreSQL, JWT, OAuth, Entra, Keycloak, GitLab CI, Azure DevOps, GitHub Actions, Kubernetes, Trivy, Kubesec, Falco, NeuVector, Azure, AWS, GitLab Secrets Manager, AWS KMS, Azure Key Vault, Ansible Vault, SAST, DAST, SCA, Infrastructure-as-Code (IaC)
3d
Save
Mark Applied
Hide
DevSecOps Engineer (Secret Clearance)
Washington, District of Columbia, United States
$108k-$188k/yr OnsiteFull Time
Deloitte
Deloitte: Provides professional audit, consulting, advisory, and tax services.
4+ YOEBachelor's in CS/cyber/IT/engineering/math,local to DMV with ability to work onsite up to 5 days/week,4+ years DevSecOps,4+ years CI/CD (Jenkins/GitLab CI/GitHub Actions/Azure DevOps),3+ cloud/IaC,2+ appsec integration,US work authorization required.
Jenkins, GitLab CI, GitHub Actions, Azure DevOps, Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), Terraform, AWS CloudFormation, Ansible, Docker, Kubernetes, OpenShift, SonarQube, Snyk, Prisma Cloud, Aqua, Python, PowerShell, Bash, Go
1w
Save
Mark Applied
Hide
Staff AI Security Engineer
Bellevue or Chicago or New York City or San Francisco or Washington
$161k-$248k/yr HybridFull Time
Okta
OktaNASDAQ: OKTA: Provide secure identity management and authentication for enterprises.
8+ YOE8+ years in security engineering or backend development, expertise in AI threat landscape, strong coding in Python or Go, cloud (AWS/GCP) experience, and leadership/mentorship ability.
Python, Go, LangChain, Strands, Claude Agent SDK, AWS, GCP, OWASP, MITRE ATLAS, NIST AI RMF
1mo
Save
Mark Applied
Hide
Senior DevOps Engineer (US REMOTE)
Waltham or Culver City or Richmond or West Valley City or Lexington or Little Rock or Allen or Phoenix or Mesa or Scottsdale or Beltsville or Birmingham or Chicago or Brentwood or Plantation or Schaumburg or Atlanta
$140k-$170k/yr RemoteFull Time
Motorola Solutions
Motorola SolutionsNYSE: MSI: Provides mission-critical communications and public safety technology.
8+ YOEU.S. citizen required. 8+ years cloud infrastructure experience, 5+ years software engineering, 2+ years Kubernetes/Docker. Experience with AWS, Terraform, Helm, MySQL, CI/CD, Git, Linux/Bash, and security/compliance frameworks; ability to obtain required security clearance.
Terraform, Helm, MySQL, Kubernetes, CI/CD, GitHub, BitBucket, Azure DevOps, Git, Linux, Bash, Docker, AWS, WireShark, TCPDump, SNGrep, nslookup, SIP/RTP, Artifactory, Sonar, Gradle, Prometheus/Grafana, ELK Stack, OWASP, NIST, CIS, Prisma Cloud/Twistlock, Mend/WhiteSource, Java
2mo
Save
Mark Applied
Hide
Software Engineer II - Front End/ Back End
Columbia, Maryland, United States
$100k-$110k/yr RemoteFull Time
Ad Hoc
Ad Hoc: Builds user-centered digital services and platforms for government agencies.
5+ YOEBachelor's degree and 5+ years software engineering experience; strong React, TypeScript, JavaScript, accessibility, REST API, testing, Git, and US citizenship with DHS Public Trust eligibility.
JavaScript, TypeScript, React, React Hooks, RESTful APIs, Git, USWDS, Redux, Context API, React Query, GraphQL, Vite, Webpack, Jest, React Testing Library, Cypress, Playwright, Docker, Kubernetes, AWS, Figma, Lighthouse, Core Web Vitals, OWASP
1mo
Save
Mark Applied
Hide
Junior Software Developer
Springfield or Arlington
$40k-$80k/yr HybridFull Time
JRAD
JRAD: Provides technical research and defense support to federal agencies.
0+ YOEBachelor's in CS or related, 0-3 years software development experience, Java/Spring preferred, proficiency with OOP, data structures, REST/microservices, databases, containerization, Agile, and security standards; able to pass DHS suitability screening.
Java, C#, C++, ASP.Net, Python, JavaScript, Spring MVC, Spring Boot, SSO, Scala, Http4s, ETL, Node.js, React, Angular, Vue.js, PostgreSQL, MySQL, MongoDB, RESTful APIs, microservices, Docker, Kubernetes, Git, Github, JIRA, SAFe, AWS, Microsoft Azure, Google Cloud Platform, Jenkins, GitLab CI/CD, GitHub Actions, JUnit, PyTest, Jest, OWASP, Section 508, NIST
1mo
Save
Mark Applied
Hide
Jr Salesforce Developer
Herndon or United States
RemoteFull Time
BDR Solutions
BDR Solutions: Provider of IT, engineering, and consulting for federal agencies.
3+ YOEBachelor's in IT/Information Systems (or 5 years' experience), 3+ years' experience, Salesforce Admin & Developer certs required, proficient in Apex, Visualforce, LWC, SOQL/SOSL, JavaScript, MuleSoft, Copado, APIs, and Agile/SAFe; U.S. citizenship and clearance eligibility required.
Apex, Visualforce, Lightning, Lightning Web Components, SOQL, SOSL, JavaScript, SOAP, REST, MuleSoft, Copado, Salesforce, SharePoint, JAWS, Microsoft Azure, OWASP, GitHub, SSDT, MS SSRS
1d
Save
Mark Applied
Hide
Sr. DevSecOps Engineer III (6735)
Reston, Virginia, United States
$200k-$220k/yr OnsiteFull Time
MetroStar
MetroStar: Provides digital transformation and IT services to government agencies.
10+ YOEActive TS/SCI with CI poly,10+ years DevSecOps experience, expertise in CI/CD, IaC, containerization, AWS, scripting, STIG/SRG compliance, and government classified domains.
GitLab CI, Jenkins, Artifactory, SonarQube, Prisma Cloud, Python, Bash, RHEL, Oracle Linux, Terraform, CloudFormation, Ansible, GitLab Service Desk, ServiceNow, AWS, STIG, SRG, OWASP, NIST, OpenSCAP
1mo
Save
Mark Applied
Hide
Lead Cybersecurity Engineer (TS/SCI)
Washington, District of Columbia, United States
OnsiteFull Time
Praescient Analytics
Praescient Analytics: Provides data analytics and intelligence for national security missions.
8+ YOEActive TS/SCI with CI polygraph eligibility, U.S. citizenship, 8+ years senior application security experience in DoD/IC, DoD 8570/8140 IAT Level III, expertise with NIST SP 800-53, DoD RMF, secure SDLC, CI/CD, and cloud/container security.
NIST SP 800-53, DoD RMF, ICD 503, Zero Trust, OWASP, SDLC, CI/CD, SonarQube, Fortify, Kubernetes, OpenShift, AWS, Azure, DevSecOps, AI/ML
2mo
Save
Mark Applied
Hide
Software Engineer, Full Stack (Remote)
Arlington, Virginia, United States
RemoteFull Time
Quantum Computing Inc.
Quantum Computing Inc.NASDAQ: QUBT: Building integrated photonics and room-temperature quantum computing systems.
3+ YOE3+ years full-stack web development; React/TypeScript frontend; Python backend with REST APIs; RBAC, security, and CI/CD.
React, TypeScript, Next.js, Python, REST APIs, WebSockets, OAuth2, OIDC, Docker, CI/CD, OWASP, RBAC
5d
Save
Mark Applied
Hide
Cyber Security Engineer 3
Bethesda, Maryland, United States
OnsiteFull Time
Base-2 Solutions
Base-2 Solutions: Delivers engineering and technology services for national security.
6+ YOEActive TS/SCI with CI poly required, 6+ years experience (bachelor's) or equivalent, DoD 8570 IA Level II cert (CISSP/CSSLP/CASP+ etc.), RMF/DoD security experience, vulnerability scanning and EMASS/XACTA familiarity.
OWASP, Fortify, SonarQube, Tenable, XACTA, eMASS, Microsoft Windows, Linux/UNIX, TCP/IP, CI/CD, Python, Java, React, GitLab, Jira, Confluence, OIDC, OAuth2, Kubernetes, Rancher, Strimzi, Cloudera, Active Directory, Bash, PowerShell
2d
Save
Mark Applied
Hide
Full Stack Application Software Developer
McLean or Melbourne
$69k-$158k/yr OnsiteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
6+ YOE6+ years building enterprise apps with .NET or Java, 3+ years front-end with React/Angular/Vue, API and DB experience, EMR not mentioned, ability to obtain Public Trust, BS in CS/Software Engineering/Information Systems.
.NET, Java, React, Angular, Vue, Microsoft SQL Server, Oracle, Netezza, DB2, GitHub Copilot, Claude Code, Codex, Jira, ServiceNow, Microsoft Azure DevOps, SAS, Python, R, Microsoft Azure, AWS, OWASP