55 appsec jobs at 43 companies in Laurel, MD

PromotedHiringCafe
Founding Backend / Infra Engineer
Cupertino, CA, US
$160k-$300k/yr On-SiteFull Time
HiringCafe
HiringCafe: Building a 100× better job search engine to take on Indeed and LinkedIn.
Own the crawlers, pipelines, and infrastructure powering a real-time job search engine. Strong Node.js and Python fundamentals; bonus points for security and reverse-engineering chops.
Node.js, Python, Elasticsearch, Redis
2mo
Save
Mark Applied
Hide
Lead AppSec Engineer
Los Angeles or Washington or United States
$150k-$220k/yr RemoteFull Time
Virtualitics
Virtualitics: Provides an AI-native platform for readiness and analytics.
Technical leadership in application security with hands-on AI/ML experience, threat modeling, cloud and container security (AWS/GCP/Azure, Docker, Kubernetes), familiarity with SAST/DAST/container scanning and security platforms (Wiz, Snyk, GitHub Advanced Security), and experience designing secure AI workflows.
Claude Code, Cursor, AWS, GCP, Azure, Docker, Kubernetes, Wiz, Snyk, GitHub Advanced Security, SAST, DAST, container scanning, CI/CD
1mo
Save
Mark Applied
Hide
Staff AppSec Engineer
Washington or United States
$210k-$230k/yr RemoteFull Time
Upside
Upside: Personalized cashback rewards platform for everyday brick-and-mortar purchases.
6+ YOE6+ years in application/product security, hands-on Python code review, vulnerability management, deep AWS security experience (Lambda, Control Tower), experience integrating AI tools, strong communication; Bachelor's preferred.
GitHub Advanced Security, GitHub Actions, GitHub Copilot, Python, Terraform, AWS, AWS Lambda, DynamoDB, S3, SNS, SQS, IAM, VPCs, AWS Control Tower, ChatGPT, Snowflake, SQL
2w
Save
Mark Applied
Hide
Web Developer / Application Security (AppSec) Engineer
Washington, District of Columbia, United States
OnsiteFull Time
ASSYST
ASSYST: An IT firm specializing in digital transformation, DevSecOps, cybersecurity, and AI integration for government agencies.
Experience with secure SDLC, DevSecOps automation, vulnerability remediation, and protecting web applications; development experience with REST APIs, SQL, .NET/C#, JavaScript, Python, Node.js, React, TypeScript; familiarity with SIEM, IDS/IPS, EDR/NDR, Wireshark; U.S. citizenship required; security certifications preferred.
REST APIs, SQL, .NET/C#, JavaScript, Python, Node.js, React, TypeScript, SIEM, IDS/IPS, EDR/NDR, Wireshark, WAF, NIST, FISMA, FedRAMP
1mo
Save
Mark Applied
Hide
Web Application Security Engineer (AppSec / DevSecOps)
Washington, District of Columbia, United States
HybridFull Time
Essnova Solutions
Essnova Solutions: Provides professional and technical services to government entities.
Experience in application security, secure SDLC, vulnerability assessment, WAF, CI/CD/DevSecOps integration, and familiarity with federal frameworks (NIST, FedRAMP); Public Trust clearance or ability to obtain.
SAST, DAST, Software Composition Analysis (SCA), Web Application Firewall (WAF), CI/CD, DevSecOps, AWS, Microsoft Azure, OWASP Top 10, NIST, FedRAMP
1w
Save
Mark Applied
Hide
Sr AWS Application Security Engineer, ADC AppSec
Arlington or Seattle
$178k-$227k/yr OnsiteFull Time
Amazon
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
4+ YOE4+ years troubleshooting systems and security issues, experience identifying vulnerabilities and remediation, mentoring or tech lead experience; threat modeling and service/microservices security preferred.
1w
Save
Mark Applied
Hide
Sr. Manager, Application Security
Bethesda or United States
$110k-$190k/yr HybridFull Time
Marriott International
Marriott InternationalNASDAQ: MAR: Operates and franchises a global network of hotels and resorts.
7+ YOE4+ Mgmt7+ years IT/security experience with 4+ years security leadership, bachelor\u0002s degree or equivalent, experience with AppSec testing (SAST/DAST/IAST), SCA, release management, and GitHub/JIRA/ServiceNow/Jenkins/Harness.
GitHub, JIRA, ServiceNow, Jenkins, Harness, SAST, DAST, IAST, SCA, OWASP, MITRE CVE/CWE
2w
Save
Mark Applied
Hide
Web Developer Security Engineer
Washington, District of Columbia, United States
OnsiteFull Time
MicroTech
MicroTech: Provider of IT integration, cloud, and managed services.
3+ YOEBachelor's degree, 3+ years in web application or application security engineering, experience with AppSec tooling, DevSecOps, WAF/FIM, vulnerability management, and federal compliance (NIST/FISMA/FedRAMP).
.NET (C# MVC, WCF), HTML5, CSS3, JavaScript, REST APIs, SQL, Python, Node.js, TypeScript, Java, React.js, Web Application Firewall (WAF), File Integrity Monitoring (FIM), SIEM, IDS/IPS, EDR, NDR, Wireshark, Docker, Kubernetes, AWS, CI/CD
1mo
Save
Mark Applied
Hide
Enterprise Cybersecurity Product Analyst
McLean, Virginia, United States
$87k-$198k/yr OnsiteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
3+ YOE3+ years in product/security/appsec roles; experience with architecture/design reviews, threat modeling, secure-by-design principles; ability to obtain Secret clearance; Bachelor's degree required; strong communication and tracking skills.
4w
Save
Mark Applied
Hide
Security Architect
Washington or Cleveland or California or Colorado or Hawaii or Illinois or Maine or Maryland or Massachusetts or Minnesota or New Jersey or New York or Vermont or Virginia or Washington
$135k-$279k/yr OnsiteFull Time
Accenture Federal Services
Accenture Federal ServicesNYSE: ACN: Provides technology and consulting services to U.S. federal agencies.
12+ YOE12+ years progressive cybersecurity experience with leadership across SOC, incident response, detection, vulnerability management, engineering, and AppSec; enterprise security program experience; US citizenship and clearance eligibility; up to 25% travel.
NIST, RMF, Zero Trust, AWS, Microsoft Azure, GCP, SOAR, AI, ML
2w
Save
Mark Applied
Hide
Web Developer Security Engineer
Washington, District of Columbia, United States
HybridFull Time
CMT Services
CMT Services: Provides management and technology consulting to government entities.
3+ YOE3+ years in web application security/AppSec/SSDLC, hands-on secure development, DevSecOps automation, WAF and FIM management, log/SIEM analysis, OWASP Top 10 mitigation, scripting for automation, and compliance with NIST/FedRAMP.
GitHub Copilot, OpenAI API/Codex, Python, JavaScript/Node.js, Java, React.js, TypeScript, .NET (C# MVC, WCF), HTML5, CSS3, JavaScript, REST APIs, SQL, Wireshark, SIEM, IDS/IPS, NDR, EDR, WAF, File Integrity Monitoring (FIM)
2w
Save
Mark Applied
Hide
Web Developer Security Engineer
Washington, District of Columbia, United States
OnsiteFull Time
MicroTech
MicroTech: Provides IT, network, and cybersecurity solutions for government agencies.
3+ YOE3+ years in web application security or AppSec, bachelor's degree, experience with secure SDLC/DevSecOps, web dev tech (.NET, C#, HTML5, JavaScript), scripting (Python, Node.js), WAF/FIM, SIEM/EDR, and federal compliance knowledge.
.NET, C#, WCF, HTML5, CSS3, JavaScript, REST APIs, SQL, Python, Node.js, TypeScript, Java, React.js, WAF, FIM, SIEM, IDS/IPS, EDR, NDR, Wireshark, AWS, Docker, Kubernetes
1mo
Save
Mark Applied
Hide
Principal - Responsible AI Solution Architect
Atlanta or Boston or Charlotte or Miami or New York or Washington
$177k-$236k/yr OnsiteFull Time
Slalom
Slalom: Provides business and technology consulting and software engineering services.
2+ YOE2+ years working on AI/ML and generative AI; advanced degree or relevant technical background preferred; experience with regulated industries, AI risk management, privacy/security, and ML/Generative AI pipelines; strong communication and critical thinking.
NIST, ISO, OWASP, MLOps, LLMOps, AgentOps
3mo
Save
Mark Applied
Hide
SR Cloud Engineer – Space Programs
Herndon or Aurora
$135k-$216k/yr OnsiteFull Time
Peraton
Peraton: National security and mission-critical government technology services provider.
10+ YOEBachelor’s with 10+ years; TS/SCI with poly; 4+ years cloud engineering; IAT Level II; cloud platforms (AWS/Azure/GCP); IaC and automation; Docker/Kubernetes/OpenShift; CI/CD experience
Docker, Kubernetes, OpenShift, Rancher, Ansible, Git/GitLab, Jenkins, AWS, Azure, GCP, CI/CD, PKI, Active Directory/FreeIPA, OWASP, STIG
5d
Save
Mark Applied
Hide
Cyber Security Engineer 3
Bethesda, Maryland, United States
OnsiteFull Time
Base-2 Solutions
Base-2 Solutions: Delivers engineering and technology services for national security.
6+ YOEActive TS/SCI with CI polygraph eligibility, DoD 8570 IA SAE Level II cert (CISSP family or CASP+), bachelor’s or 6+ yrs experience (or +3 yrs in lieu), RMF/DoDI/NIST/SP800-53 experience, STIG/SCAP/ACAS scanning and vulnerability analysis, Windows/Linux knowledge.
DoDI 8510.01, NIST SP 800-53, STIGs, SCAP, STIG Viewer, ACAS, OWASP, Fortify, SonarQube, Tenable, XACTA, eMASS, Python, Java, React, GitLab, Jira, Confluence, Kubernetes, Rancher, Strimzi, Cloudera, Active Directory, Bash, PowerShell, CI/CD, OIDC, OAuth2, TCP/IP, Microsoft Windows, Linux/UNIX
1mo
Save
Mark Applied
Hide
Chief Technologist, HPC & AI
Spring or Annapolis Junction
$175k-$412k/yr HybridFull Time
Hewlett Packard Enterprise
Hewlett Packard EnterpriseNYSE: HPE: Providing global edge-to-cloud infrastructure and IT solutions for businesses.
3+ YOEBachelor's in CS/Engineering/hard sciences (Master's/PhD preferred), deep AI and data-security experience, 3+ years development experience, extensive security architecture experience with US federal/state compliance frameworks.
NVIDIA, ML, LLM, SLM, STIG, SOC 2, HIPAA, HITECH, PII, PCI DSS, NIST CSF, NIST 800, AI RMF, CMMC, CSfC, ISO, REL, FISMA, FERPA, SOX, GDPR, OWASP, FedRAMP, StateRAMP, NIST 800-161, Key Management, Logging and Monitoring, SPF, DKIM, DMARC, S/MIME, TLS for SMTP, 802.1X, SNMPv3, DNSSEC, MACsec, VPN Protocols, SAML 2.0, OAuth 2.0, OpenID Connect, MFA, PKI, AES-256, FIPS 140-3, TLS 1.2, TLS 1.3, IPsec, SSH, SFTP, HTTPS, NIPR, SIPR, JWICS, Zero Trust
1mo
Save
Mark Applied
Hide
NLM Bioinformatics Specialist and Developer (SME) I - III
Bethesda, Maryland, United States
$90k-$135k/yr OnsiteFull Time
Lexical Intelligence
Lexical Intelligence: Develops NLP software for biomedical research and portfolio analysis.
4+ YOESME I-III with Python, ML/NLP, biomedical informatics; experience in software development and data analytics.
Python, Java, C++, R, JavaScript, SQL, MATLAB, NLP, ML, DL, SDLC, OWASP, US-CERT
1d
Save
Mark Applied
Hide
Staff AI Security Engineer
Bellevue or Chicago or New York City or San Francisco or Washington
$161k-$248k/yr HybridFull Time
Okta
OktaNASDAQ: OKTA: Provide secure identity management and authentication for enterprises.
8+ YOE8+ years in security engineering or backend development, expertise in AI threat landscape, strong coding in Python or Go, cloud (AWS/GCP) experience, and leadership/mentorship ability.
Python, Go, LangChain, Strands, Claude Agent SDK, AWS, GCP, OWASP, MITRE ATLAS, NIST AI RMF
1mo
Save
Mark Applied
Hide
Software Engineer II - Front End/ Back End
Columbia, Maryland, United States
$100k-$110k/yr RemoteFull Time
Ad Hoc
Ad Hoc: Builds user-centered digital services and platforms for government agencies.
5+ YOEBachelor's degree and 5+ years software engineering experience; strong React, TypeScript, JavaScript, accessibility, REST API, testing, Git, and US citizenship with DHS Public Trust eligibility.
JavaScript, TypeScript, React, React Hooks, RESTful APIs, Git, USWDS, Redux, Context API, React Query, GraphQL, Vite, Webpack, Jest, React Testing Library, Cypress, Playwright, Docker, Kubernetes, AWS, Figma, Lighthouse, Core Web Vitals, OWASP
3mo
Save
Mark Applied
Hide
Senior DevOps Engineer
Columbia, Maryland, United States
$106k-$137k/yr RemoteFull Time
eSimplicity
eSimplicity: Provides digital and data services to federal government agencies.
8+ YOEBachelor’s degree in Computer Science or Engineering, or 10+ years of relevant experience; 8+ years DevOps; strong AWS, IaC (Terraform/Terragrunt), GitHub Actions; DevSecOps focus; containerization (Docker); Python or Bash; U.S. citizenship or Green Card with ability to obtain Public Trust clearance.
GitHub Actions, Terraform, Terragrunt, Docker, Python, Bash, Django, Databricks, Redshift, Maven, Nessus, BurpSuite, OWASP, AWS
1mo
Save
Mark Applied
Hide
Junior Software Developer
Springfield or Arlington
$40k-$80k/yr HybridFull Time
JRAD
JRAD: Provides technical research and defense support to federal agencies.
0+ YOEBachelor's in CS or related, 0-3 years software development experience, Java/Spring preferred, proficiency with OOP, data structures, REST/microservices, databases, containerization, Agile, and security standards; able to pass DHS suitability screening.
Java, C#, C++, ASP.Net, Python, JavaScript, Spring MVC, Spring Boot, SSO, Scala, Http4s, ETL, Node.js, React, Angular, Vue.js, PostgreSQL, MySQL, MongoDB, RESTful APIs, microservices, Docker, Kubernetes, Git, Github, JIRA, SAFe, AWS, Microsoft Azure, Google Cloud Platform, Jenkins, GitLab CI/CD, GitHub Actions, JUnit, PyTest, Jest, OWASP, Section 508, NIST