60 appsec jobs at 43 companies in Gaithersburg, MD

1mo
Save
Mark Applied
Hide
Staff AppSec Engineer
Washington or United States
$210k-$230k/yr RemoteFull Time
Upside
Upside: Personalized cashback rewards platform for everyday brick-and-mortar purchases.
6+ YOE6+ years in application/product security, hands-on Python code review, vulnerability management, deep AWS security experience (Lambda, Control Tower), experience integrating AI tools, strong communication; Bachelor's preferred.
GitHub Advanced Security, GitHub Actions, GitHub Copilot, Python, Terraform, AWS, AWS Lambda, DynamoDB, S3, SNS, SQS, IAM, VPCs, AWS Control Tower, ChatGPT, Snowflake, SQL
1mo
Save
Mark Applied
Hide
Web Application Security Engineer (AppSec / DevSecOps)
Washington, District of Columbia, United States
HybridFull Time
Essnova Solutions
Essnova Solutions: Provides professional and technical services to government entities.
Experience in application security, secure SDLC, vulnerability assessment, WAF, CI/CD/DevSecOps integration, and familiarity with federal frameworks (NIST, FedRAMP); Public Trust clearance or ability to obtain.
SAST, DAST, Software Composition Analysis (SCA), Web Application Firewall (WAF), CI/CD, DevSecOps, AWS, Microsoft Azure, OWASP Top 10, NIST, FedRAMP
3w
Save
Mark Applied
Hide
Sr. Manager, Application Security
Bethesda or United States
$110k-$190k/yr HybridFull Time
Marriott International
Marriott InternationalNASDAQ: MAR: Operates and franchises a global network of hotels and resorts.
7+ YOE4+ Mgmt7+ years IT/security experience with 4+ years security leadership, bachelor\u0002s degree or equivalent, experience with AppSec testing (SAST/DAST/IAST), SCA, release management, and GitHub/JIRA/ServiceNow/Jenkins/Harness.
GitHub, JIRA, ServiceNow, Jenkins, Harness, SAST, DAST, IAST, SCA, OWASP, MITRE CVE/CWE
1mo
Save
Mark Applied
Hide
Enterprise Cybersecurity Product Analyst
McLean, Virginia, United States
$87k-$198k/yr OnsiteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
3+ YOE3+ years in product/security/appsec roles; experience with architecture/design reviews, threat modeling, secure-by-design principles; ability to obtain Secret clearance; Bachelor's degree required; strong communication and tracking skills.
1mo
Save
Mark Applied
Hide
Security Architect
Washington or Cleveland or California or Colorado or Hawaii or Illinois or Maine or Maryland or Massachusetts or Minnesota or New Jersey or New York or Vermont or Virginia or Washington
$135k-$279k/yr OnsiteFull Time
Accenture Federal Services
Accenture Federal ServicesNYSE: ACN: Provides technology and consulting services to U.S. federal agencies.
12+ YOE12+ years progressive cybersecurity experience with leadership across SOC, incident response, detection, vulnerability management, engineering, and AppSec; enterprise security program experience; US citizenship and clearance eligibility; up to 25% travel.
NIST, RMF, Zero Trust, AWS, Microsoft Azure, GCP, SOAR, AI, ML
1mo
Save
Mark Applied
Hide
Web Developer Security Engineer
Washington, District of Columbia, United States
HybridFull Time
CMT Services
CMT Services: Provides management and technology consulting to government entities.
3+ YOE3+ years in web application security/AppSec/SSDLC, hands-on secure development, DevSecOps automation, WAF and FIM management, log/SIEM analysis, OWASP Top 10 mitigation, scripting for automation, and compliance with NIST/FedRAMP.
GitHub Copilot, OpenAI API/Codex, Python, JavaScript/Node.js, Java, React.js, TypeScript, .NET (C# MVC, WCF), HTML5, CSS3, JavaScript, REST APIs, SQL, Wireshark, SIEM, IDS/IPS, NDR, EDR, WAF, File Integrity Monitoring (FIM)
2w
Save
Mark Applied
Hide
DevSecOps Engineer (Secret Clearance)
Washington, District of Columbia, United States
$108k-$188k/yr OnsiteFull Time
Deloitte
Deloitte: Provides professional audit, consulting, advisory, and tax services.
4+ YOEBachelor's in CS/cyber/IT/engineering/math,local to DMV with ability to work onsite up to 5 days/week,4+ years DevSecOps,4+ years CI/CD (Jenkins/GitLab CI/GitHub Actions/Azure DevOps),3+ cloud/IaC,2+ appsec integration,US work authorization required.
Jenkins, GitLab CI, GitHub Actions, Azure DevOps, Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), Terraform, AWS CloudFormation, Ansible, Docker, Kubernetes, OpenShift, SonarQube, Snyk, Prisma Cloud, Aqua, Python, PowerShell, Bash, Go
1mo
Save
Mark Applied
Hide
Lead Penetration Tester
Fort Collins or Kansas City or Washington
$130k-$150k/yr FieldFull Time
Revolutional
Revolutional: Delivers advanced technology and mission support to federal agencies.
5+ YOEBachelor's or equivalent,5+ years penetration testing with federal experience,CISA AES required or in process,active Secret clearance,FedRAMP pen testing experience,ability to travel to agency sites.
OWASP, NIST SP 800, DISA STIG, FedRAMP, AWS, Azure, GCP, GovCloud
1mo
Save
Mark Applied
Hide
Senior DevOps Engineer (US REMOTE)
Waltham or Culver City or Richmond or West Valley City or Lexington or Little Rock or Allen or Phoenix or Mesa or Scottsdale or Beltsville or Birmingham or Chicago or Brentwood or Plantation or Schaumburg or Atlanta
$140k-$170k/yr RemoteFull Time
Motorola Solutions
Motorola SolutionsNYSE: MSI: Provides mission-critical communications and public safety technology.
8+ YOEU.S. citizen required. 8+ years cloud infrastructure experience, 5+ years software engineering, 2+ years Kubernetes/Docker. Experience with AWS, Terraform, Helm, MySQL, CI/CD, Git, Linux/Bash, and security/compliance frameworks; ability to obtain required security clearance.
Terraform, Helm, MySQL, Kubernetes, CI/CD, GitHub, BitBucket, Azure DevOps, Git, Linux, Bash, Docker, AWS, WireShark, TCPDump, SNGrep, nslookup, SIP/RTP, Artifactory, Sonar, Gradle, Prometheus/Grafana, ELK Stack, OWASP, NIST, CIS, Prisma Cloud/Twistlock, Mend/WhiteSource, Java
2w
Save
Mark Applied
Hide
Senior Backend Developer (Java / Integrations)
Falls Church, Virginia, United States
$90k-$150k/yr HybridFull Time
BizFlow
BizFlow: Provides low-code software for business process management and automation.
10+ YOE10+ years backend development with strong Java and SQL, experience building REST/SOAP integrations, mentoring developers, troubleshooting across application/database/server layers, and familiarity with enterprise systems.
Java (Java 11+), Spring Framework, Spring Boot, Hibernate/JPA, Querydsl, Spring Integration, Apache Camel, BizFlow M, BizFlow AppDev, Oracle, Microsoft SQL Server, RESTful APIs, SOAP Web Services, gRPC, JSON, XML, SAML, OAuth 2.0, JWT, mTLS, OWASP, Tomcat, WildFly/JBoss, Docker, AWS, Git, GitHub, Jira, Confluence, Microsoft SharePoint, Postman, Jenkins, GitHub Actions
6d
Save
Mark Applied
Hide
Cyber Triage Analyst
Linthicum Heights, Maryland, United States
$62k-$141k/yr OnsiteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Consulting and technology services for government and commercial clients
3+ YOERequires Secret clearance, high school diploma/GED with 9+ years, bachelor's with 5+ years, master's with 3+ years, or doctorate in vulnerability assessment, plus DoD IAT Level II certification such as CompTIA Security+.
HackerOne Triage, Kali Linux, Burp Suite, MITRE ATT&CK, CVSS, NIST, OWASP, PowerShell, Bash, Python, Perl, SQL, HTML/CSS, CompTIA Security+, CEH, CCNA-Security, CySA+, OSCP, PenTest+
2w
Save
Mark Applied
Hide
Cybersecurity Lead - ISSM
Chantilly, Virginia, United States
$160k-$200k/yr OnsiteFull Time
SAIC
SAICNYSE: SAIC: Provides engineering, IT, and mission support services to government.
9+ YOEExpertise in RMF/ATO governance, JSIG/NIST SP 800-53/STIG controls, vulnerability adjudication (ACAS/Nessus), Xacta experience, DoD 8140-aligned certifications, cloud/container security, and team mentoring.
RMF, NIST SP 800-53, JSIG, Xacta, STIG, OWASP, ACAS, Nessus, SAST, DAST
3mo
Save
Mark Applied
Hide
Software Engineer, Full Stack (Remote)
Arlington, Virginia, United States
RemoteFull Time
Quantum Computing Inc.
Quantum Computing Inc.NASDAQ: QUBT: Building integrated photonics and room-temperature quantum computing systems.
3+ YOE3+ years full-stack web development; React/TypeScript frontend; Python backend with REST APIs; RBAC, security, and CI/CD.
React, TypeScript, Next.js, Python, REST APIs, WebSockets, OAuth2, OIDC, Docker, CI/CD, OWASP, RBAC
2d
Save
Mark Applied
Hide
Senior Software Security Engineer- Cloud/GovCloud (Top Secret cleared)
Reston, Virginia, United States
$119k-$203k/yr RemoteFull Time
ICF
ICFNASDAQ: ICFI: Provides strategic consulting and technology services to global organizations.
5+ YOEActive Top Secret clearance and 5+ years in application security, secure software development, or cybersecurity engineering; AWS cloud experience, secure code review, vulnerability assessment, and a technical bachelor's degree preferred.
AWS, AWS GovCloud, SAST, DAST, SCA, OWASP, NIST, DoD STIGs
2mo
Save
Mark Applied
Hide
Chief Technologist, HPC & AI
Spring or Annapolis Junction
$175k-$412k/yr HybridFull Time
Hewlett Packard Enterprise
Hewlett Packard EnterpriseNYSE: HPE: Providing global edge-to-cloud infrastructure and IT solutions for businesses.
3+ YOEBachelor's in CS/Engineering/hard sciences (Master's/PhD preferred), deep AI and data-security experience, 3+ years development experience, extensive security architecture experience with US federal/state compliance frameworks.
NVIDIA, ML, LLM, SLM, STIG, SOC 2, HIPAA, HITECH, PII, PCI DSS, NIST CSF, NIST 800, AI RMF, CMMC, CSfC, ISO, REL, FISMA, FERPA, SOX, GDPR, OWASP, FedRAMP, StateRAMP, NIST 800-161, Key Management, Logging and Monitoring, SPF, DKIM, DMARC, S/MIME, TLS for SMTP, 802.1X, SNMPv3, DNSSEC, MACsec, VPN Protocols, SAML 2.0, OAuth 2.0, OpenID Connect, MFA, PKI, AES-256, FIPS 140-3, TLS 1.2, TLS 1.3, IPsec, SSH, SFTP, HTTPS, NIPR, SIPR, JWICS, Zero Trust
3d
Save
Mark Applied
Hide
Software Engineer - Mid to Experienced Level (Maryland)
Fort Meade, Maryland, United States
$105k-$193k/yr OnsiteFull Time
National Security Agency
National Security Agency: US agency providing foreign signals intelligence and cybersecurity.
3+ YOEComputer Science or Software Engineering degree with foundational CS coursework and relevant software development experience; requirements vary from 0 to 8 years by education and work level. Top Secret clearance required.
COBOL, C, C++, Java, Angular, React, Python, PIG Analytics, Pyspark, Docker, Kubernetes, Amazon Web Services (AWS), Linux, VMWare, ElasticSearch, Rust, Ansible, GitLab, NIST, ISO 27001, OWASP, TLS/SSL, Security Information and Event Management (SIEM), intrusion detection systems (IDS), hardware security modules (HSMs)
2mo
Save
Mark Applied
Hide
Senior Security Code Reviewer
Camp Springs, Maryland, United States
$175k-$205k/yr HybridFull Time
Ashburn Consulting
Ashburn Consulting: Provides network engineering and cybersecurity services for government agencies.
10+ YOEU.S. citizen; willing to work as W-2; DHS EOD/suitability; 10+ years in application security, DevSecOps, zero trust; experience with APT testing tools; cloud and on-prem security; AWS; Terraform/Kubernetes; security governance and compliance; strong writing and mentoring.
Checkmarx, ZTNA, SWG, AWS, Terraform, Kubernetes, Palo Alto, AlgoSec, Gigamon, Corelight, SAST, DAST, SCA, CI/CD, OWASP, NIST
11h
Save
Mark Applied
Hide
Information Assurance – Cybersecurity
Bethesda, Maryland, United States
$146k-$228k/yr OnsiteFull Time
Noblis
Noblis: Nonprofit science, technology, and strategy firm supporting government missions.
10+ YOERequires U.S. citizenship, TS/SCI clearance with CI polygraph, BS plus 12 years or master's plus 10 years of relevant experience, cybersecurity expertise, programming, malware analysis, vulnerability research, and penetration testing.
Electronic Medical Records (EMR), Microsoft Excel, AWS, Azure, Google Cloud, AES, RSA, Python, C, C++, Java, Assembly, Metasploit, Burp Suite, Kali Linux, SQL injection, Cross-Site Scripting (XSS), Buffer Overflow, NIST, OWASP, CIS Controls, ISO 27001
3w
Save
Mark Applied
Hide
Senior Associate, Application Security, DevSecOps
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yr OnsiteFull Time
KPMG
KPMG: Global professional services network providing audit, tax, and advisory.
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
Java, C#, JavaScript, Python, SQL, CI/CD, SAST, DAST, Azure, OWASP
1w
Save
Mark Applied
Hide
Identity and Access Management (IAM) Senior Consultant
Boston or Washington or Denver
$140k-$200k/yr OnsiteFull Time
Bank of America
Bank of AmericaNYSE: BAC: Provides global banking, investing, and financial risk management services.
10+ YOE10+ years in IAM or related disciplines, deep knowledge of cloud IAM (AWS, Microsoft Azure, Google Cloud Platform), generative AI identity risks, comparative technology assessments, security frameworks, and strong stakeholder communication.
AWS, Microsoft Azure, Google Cloud Platform, NIST AI Risk Management Framework, NIST Cybersecurity Framework, MITRE ATLAS, OWASP