39 appsec engineer jobs at 30 companies in White Oak, MD
6d
Save
Mark Applied
Hide
6d
Security Engineer, AWS AppSec
Herndon or Seattle
$136k-$184k/yrOnsiteFull Time
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
Bachelor's degree in engineering, computer science, or related field; security engineering experience; web security knowledge; coding or scripting ability; and experience with application security, testing, or incident response.
Web Application Security Engineer (AppSec / DevSecOps)
Washington, District of Columbia, United States
HybridFull Time
Essnova Solutions: Provides professional and technical services to government entities.
Experience in application security, secure SDLC, vulnerability assessment, WAF, CI/CD/DevSecOps integration, and familiarity with federal frameworks (NIST, FedRAMP); Public Trust clearance or ability to obtain.
SAST, DAST, Software Composition Analysis (SCA), Web Application Firewall (WAF), CI/CD, DevSecOps, AWS, Microsoft Azure, OWASP Top 10, NIST, FedRAMP
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
5+ YOE5+ years in enterprise observability, monitoring, and SRE; Dynatrace, AIOps, Python, JavaScript, Node.js, Terraform, dashboards, SLOs/SLAs, Agile, and network monitoring expertise; bachelor's degree and U.S. citizenship required.
Eccalon: High-tech cybersecurity and AI solutions for government and industry.
3+ YOE3+ years software engineering with security focus, proficiency in one or more languages (JavaScript/TypeScript, Python, Go, C#), secure coding, SAST/DAST, familiarity with NIST/CMMC/FedRAMP and AWS/Azure security.
Modern Technology Solutions, Inc.: Provides engineering, technology, and cybersecurity services for national security.
10+ YOE10+ years technical leadership in semiconductor R&D; experience in integrated circuit and embedded system design, micro-electronics analysis, system security, cryptography/key management, testing and evaluation; current TS/SCI clearance and MS in related field.
Deloitte: Provides professional audit, consulting, advisory, and tax services.
4+ YOEBachelor's in CS/cyber/IT/engineering/math,local to DMV with ability to work onsite up to 5 days/week,4+ years DevSecOps,4+ years CI/CD (Jenkins/GitLab CI/GitHub Actions/Azure DevOps),3+ cloud/IaC,2+ appsec integration,US work authorization required.
Jenkins, GitLab CI, GitHub Actions, Azure DevOps, Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), Terraform, AWS CloudFormation, Ansible, Docker, Kubernetes, OpenShift, SonarQube, Snyk, Prisma Cloud, Aqua, Python, PowerShell, Bash, Go
Eagan or Frisco or New York City or Richmond or San Francisco or Los Angeles or Irvine or McLean or Washington
$198k-$368k/yrHybridFull Time
Thomson ReutersNASDAQ: TRI: Provides professional software, data, and news services globally.
12+ YOE12+ years of cybersecurity engineering experience at Principal, Staff, or Distinguished Engineer level, with AI threat defense, production AI systems, mature SOC/CIRT, enterprise security architecture, and technical influence expertise.
Fannie MaeOTCQB: FNMA: Providing liquidity and stability to the U.S. housing market.
8+ YOEBachelor's degree and 8+ years in cybersecurity or related engineering. Requires multi-cloud security expertise across AWS, Google Cloud, and Microsoft Azure, infrastructure security, automation, application security, AI security, and cross-functional leadership.
Bellevue or Chicago or New York City or San Francisco or Washington
$161k-$248k/yrHybridFull Time
OktaNASDAQ: OKTA: Provide secure identity management and authentication for enterprises.
8+ YOE8+ years in security engineering or backend development, expertise in AI threat landscape, strong coding in Python or Go, cloud (AWS/GCP) experience, and leadership/mentorship ability.
Python, Go, LangChain, Strands, Claude Agent SDK, AWS, GCP, OWASP, MITRE ATLAS, NIST AI RMF
Austin or Barcelona or Bochum or Dubai or Geneva or London or Singapore or Tokyo or Washington, D.C.
OnsiteFull Time
Sonar: Provides automated tools for code quality and security analysis.
Hands-on DevOps, software engineering, or platform experience with CI/CD and Git; strong business, communication, analytical, and customer-facing skills. English fluency required; Spanish or Portuguese desirable.
Base-2 Solutions: Delivers engineering and technology services for national security.
10+ YOEBachelor's or master's degree with 10 years of experience, active TS/SCI clearance, DoD IASAE Level II certification, vulnerability management, RMF, secure architecture, and systems engineering expertise.
Waltham or Culver City or Richmond or West Valley City or Lexington or Little Rock or Allen or Phoenix or Mesa or Scottsdale or Beltsville or Birmingham or Chicago or Brentwood or Plantation or Schaumburg or Atlanta
$140k-$170k/yrRemoteFull Time
Motorola SolutionsNYSE: MSI: Provides mission-critical communications and public safety technology.
8+ YOEU.S. citizen required. 8+ years cloud infrastructure experience, 5+ years software engineering, 2+ years Kubernetes/Docker. Experience with AWS, Terraform, Helm, MySQL, CI/CD, Git, Linux/Bash, and security/compliance frameworks; ability to obtain required security clearance.
Booz Allen HamiltonNYSE: BAH: Consulting and technology services for government and commercial clients
5+ YOERequires 5+ years in enterprise observability, monitoring, and SRE; Dynatrace, AIOps, Python, JavaScript, Node.js, Terraform, dashboards, SLOs/SLAs, networking protocols, mentoring, and a bachelor's degree. U.S. citizenship required.
Orbis Operations: Provides specialized intelligence, cyber, and operational support services.
7+ YOERequires 7+ years shaping platform security, deep mTLS/TLS and authorization architecture experience, Go and protobuf/gRPC fluency, threat modeling, strong communication, and technical direction experience.
M9 Solutions: Provides IT modernization and technology services to federal agencies.
7+ YOERequires 7+ years of DevSecOps experience, active TS/SCI clearance with CI polygraph, IAT Level 2 certification, AWS, CI/CD, IaC, Linux, containerization, scripting, security compliance, and troubleshooting expertise.
JRAD: Provides technical research and defense support to federal agencies.
0+ YOEBachelor's in CS or related, 0-3 years software development experience, Java/Spring preferred, proficiency with OOP, data structures, REST/microservices, databases, containerization, Agile, and security standards; able to pass DHS suitability screening.
Java, C#, C++, ASP.Net, Python, JavaScript, Spring MVC, Spring Boot, SSO, Scala, Http4s, ETL, Node.js, React, Angular, Vue.js, PostgreSQL, MySQL, MongoDB, RESTful APIs, microservices, Docker, Kubernetes, Git, Github, JIRA, SAFe, AWS, Microsoft Azure, Google Cloud Platform, Jenkins, GitLab CI/CD, GitHub Actions, JUnit, PyTest, Jest, OWASP, Section 508, NIST
MetroStar: Provides digital transformation and IT services to government agencies.
10+ YOEActive TS/SCI with CI poly,10+ years DevSecOps experience, expertise in CI/CD, IaC, containerization, AWS, scripting, STIG/SRG compliance, and government classified domains.
Praescient Analytics: Provides data analytics and intelligence for national security missions.
8+ YOEActive TS/SCI with CI polygraph eligibility, U.S. citizenship, 8+ years senior application security experience in DoD/IC, DoD 8570/8140 IAT Level III, expertise with NIST SP 800-53, DoD RMF, secure SDLC, CI/CD, and cloud/container security.
NIST SP 800-53, DoD RMF, ICD 503, Zero Trust, OWASP, SDLC, CI/CD, SonarQube, Fortify, Kubernetes, OpenShift, AWS, Azure, DevSecOps, AI/ML