56 appsec jobs at 41 companies in Manassas, VA
1mo
Save
Mark Applied
Hide
Staff AppSec Engineer
Washington or United States
$210k-$230k/yr RemoteFull Time
6+ YOE6+ years in application/product security, hands-on Python code review, vulnerability management, deep AWS security experience (Lambda, Control Tower), experience integrating AI tools, strong communication; Bachelor's preferred.
GitHub Advanced Security, GitHub Actions, GitHub Copilot, Python, Terraform, AWS, AWS Lambda, DynamoDB, S3, SNS, SQS, IAM, VPCs, AWS Control Tower, ChatGPT, Snowflake, SQL
1mo
Save
Mark Applied
Hide
Web Application Security Engineer (AppSec / DevSecOps)
Washington, District of Columbia, United States
HybridFull Time
Experience in application security, secure SDLC, vulnerability assessment, WAF, CI/CD/DevSecOps integration, and familiarity with federal frameworks (NIST, FedRAMP); Public Trust clearance or ability to obtain.
SAST, DAST, Software Composition Analysis (SCA), Web Application Firewall (WAF), CI/CD, DevSecOps, AWS, Microsoft Azure, OWASP Top 10, NIST, FedRAMP
3w
Save
Mark Applied
Hide
Sr. Manager, Application Security
Bethesda or United States
$110k-$190k/yr HybridFull Time
7+ YOE4+ Mgmt7+ years IT/security experience with 4+ years security leadership, bachelor\u0002s degree or equivalent, experience with AppSec testing (SAST/DAST/IAST), SCA, release management, and GitHub/JIRA/ServiceNow/Jenkins/Harness.
GitHub, JIRA, ServiceNow, Jenkins, Harness, SAST, DAST, IAST, SCA, OWASP, MITRE CVE/CWE
1mo
Save
Mark Applied
Hide
Enterprise Cybersecurity Product Analyst
McLean, Virginia, United States
$87k-$198k/yr OnsiteFull Time
3+ YOE3+ years in product/security/appsec roles; experience with architecture/design reviews, threat modeling, secure-by-design principles; ability to obtain Secret clearance; Bachelor's degree required; strong communication and tracking skills.
1mo
Save
Mark Applied
Hide
Security Architect
Washington or Cleveland or California or Colorado or Hawaii or Illinois or Maine or Maryland or Massachusetts or Minnesota or New Jersey or New York or Vermont or Virginia or Washington
$135k-$279k/yr OnsiteFull Time
12+ YOE12+ years progressive cybersecurity experience with leadership across SOC, incident response, detection, vulnerability management, engineering, and AppSec; enterprise security program experience; US citizenship and clearance eligibility; up to 25% travel.
NIST, RMF, Zero Trust, AWS, Microsoft Azure, GCP, SOAR, AI, ML
1mo
Save
Mark Applied
Hide
Web Developer Security Engineer
Washington, District of Columbia, United States
HybridFull Time
3+ YOE3+ years in web application security/AppSec/SSDLC, hands-on secure development, DevSecOps automation, WAF and FIM management, log/SIEM analysis, OWASP Top 10 mitigation, scripting for automation, and compliance with NIST/FedRAMP.
GitHub Copilot, OpenAI API/Codex, Python, JavaScript/Node.js, Java, React.js, TypeScript, .NET (C# MVC, WCF), HTML5, CSS3, JavaScript, REST APIs, SQL, Wireshark, SIEM, IDS/IPS, NDR, EDR, WAF, File Integrity Monitoring (FIM)
2w
Save
Mark Applied
Hide
DevSecOps Engineer (Secret Clearance)
Washington, District of Columbia, United States
$108k-$188k/yr OnsiteFull Time
4+ YOEBachelor's in CS/cyber/IT/engineering/math,local to DMV with ability to work onsite up to 5 days/week,4+ years DevSecOps,4+ years CI/CD (Jenkins/GitLab CI/GitHub Actions/Azure DevOps),3+ cloud/IaC,2+ appsec integration,US work authorization required.
Jenkins, GitLab CI, GitHub Actions, Azure DevOps, Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), Terraform, AWS CloudFormation, Ansible, Docker, Kubernetes, OpenShift, SonarQube, Snyk, Prisma Cloud, Aqua, Python, PowerShell, Bash, Go
4w
Save
Mark Applied
Hide
Lead Penetration Tester
Fort Collins or Kansas City or Washington
$130k-$150k/yr FieldFull Time
5+ YOEBachelor's or equivalent,5+ years penetration testing with federal experience,CISA AES required or in process,active Secret clearance,FedRAMP pen testing experience,ability to travel to agency sites.
OWASP, NIST SP 800, DISA STIG, FedRAMP, AWS, Azure, GCP, GovCloud
1mo
Save
Mark Applied
Hide
Senior DevOps Engineer (US REMOTE)
Waltham or Culver City or Richmond or West Valley City or Lexington or Little Rock or Allen or Phoenix or Mesa or Scottsdale or Beltsville or Birmingham or Chicago or Brentwood or Plantation or Schaumburg or Atlanta
$140k-$170k/yr RemoteFull Time
8+ YOEU.S. citizen required. 8+ years cloud infrastructure experience, 5+ years software engineering, 2+ years Kubernetes/Docker. Experience with AWS, Terraform, Helm, MySQL, CI/CD, Git, Linux/Bash, and security/compliance frameworks; ability to obtain required security clearance.
Terraform, Helm, MySQL, Kubernetes, CI/CD, GitHub, BitBucket, Azure DevOps, Git, Linux, Bash, Docker, AWS, WireShark, TCPDump, SNGrep, nslookup, SIP/RTP, Artifactory, Sonar, Gradle, Prometheus/Grafana, ELK Stack, OWASP, NIST, CIS, Prisma Cloud/Twistlock, Mend/WhiteSource, Java
1w
Save
Mark Applied
Hide
Senior Backend Developer (Java / Integrations)
Falls Church, Virginia, United States
$90k-$150k/yr HybridFull Time
10+ YOE10+ years backend development with strong Java and SQL, experience building REST/SOAP integrations, mentoring developers, troubleshooting across application/database/server layers, and familiarity with enterprise systems.
Java (Java 11+), Spring Framework, Spring Boot, Hibernate/JPA, Querydsl, Spring Integration, Apache Camel, BizFlow M, BizFlow AppDev, Oracle, Microsoft SQL Server, RESTful APIs, SOAP Web Services, gRPC, JSON, XML, SAML, OAuth 2.0, JWT, mTLS, OWASP, Tomcat, WildFly/JBoss, Docker, AWS, Git, GitHub, Jira, Confluence, Microsoft SharePoint, Postman, Jenkins, GitHub Actions
2w
Save
Mark Applied
Hide
Cybersecurity Lead - ISSM
Chantilly, Virginia, United States
$160k-$200k/yr OnsiteFull Time
9+ YOEExpertise in RMF/ATO governance, JSIG/NIST SP 800-53/STIG controls, vulnerability adjudication (ACAS/Nessus), Xacta experience, DoD 8140-aligned certifications, cloud/container security, and team mentoring.
RMF, NIST SP 800-53, JSIG, Xacta, STIG, OWASP, ACAS, Nessus, SAST, DAST
3mo
Save
Mark Applied
Hide
Software Engineer, Full Stack (Remote)
Arlington, Virginia, United States
RemoteFull Time
3+ YOE3+ years full-stack web development; React/TypeScript frontend; Python backend with REST APIs; RBAC, security, and CI/CD.
React, TypeScript, Next.js, Python, REST APIs, WebSockets, OAuth2, OIDC, Docker, CI/CD, OWASP, RBAC
2mo
Save
Mark Applied
Hide
Chief Technologist, HPC & AI
Spring or Annapolis Junction
$175k-$412k/yr HybridFull Time
3+ YOEBachelor's in CS/Engineering/hard sciences (Master's/PhD preferred), deep AI and data-security experience, 3+ years development experience, extensive security architecture experience with US federal/state compliance frameworks.
NVIDIA, ML, LLM, SLM, STIG, SOC 2, HIPAA, HITECH, PII, PCI DSS, NIST CSF, NIST 800, AI RMF, CMMC, CSfC, ISO, REL, FISMA, FERPA, SOX, GDPR, OWASP, FedRAMP, StateRAMP, NIST 800-161, Key Management, Logging and Monitoring, SPF, DKIM, DMARC, S/MIME, TLS for SMTP, 802.1X, SNMPv3, DNSSEC, MACsec, VPN Protocols, SAML 2.0, OAuth 2.0, OpenID Connect, MFA, PKI, AES-256, FIPS 140-3, TLS 1.2, TLS 1.3, IPsec, SSH, SFTP, HTTPS, NIPR, SIPR, JWICS, Zero Trust
2mo
Save
Mark Applied
Hide
Senior Security Code Reviewer
Camp Springs, Maryland, United States
$175k-$205k/yr HybridFull Time
10+ YOEU.S. citizen; willing to work as W-2; DHS EOD/suitability; 10+ years in application security, DevSecOps, zero trust; experience with APT testing tools; cloud and on-prem security; AWS; Terraform/Kubernetes; security governance and compliance; strong writing and mentoring.
Checkmarx, ZTNA, SWG, AWS, Terraform, Kubernetes, Palo Alto, AlgoSec, Gigamon, Corelight, SAST, DAST, SCA, CI/CD, OWASP, NIST
1w
Save
Mark Applied
Hide
Identity and Access Management (IAM) Senior Consultant
Boston or Washington or Denver
$140k-$200k/yr OnsiteFull Time
10+ YOE10+ years in IAM or related disciplines, deep knowledge of cloud IAM (AWS, Microsoft Azure, Google Cloud Platform), generative AI identity risks, comparative technology assessments, security frameworks, and strong stakeholder communication.
AWS, Microsoft Azure, Google Cloud Platform, NIST AI Risk Management Framework, NIST Cybersecurity Framework, MITRE ATLAS, OWASP
2mo
Save
Mark Applied
Hide
SOC Analyst
Fairfax, Virginia, United States
OnsiteFull Time
5+ YOE5+ years in Cyber Security with security event monitoring and incident response; degree in IT; CISSP/CISM/CySA+/GCIH desired.
Tenable, Splunk, Microsoft Defender, SIEM, Symantec DLP, Netsparker, Penetration Testing, ServiceNow, Web Application Security, Data Loss Prevention, Incident Response, Forensics, Security Tool Evaluation, Endpoint Protection
1w
Save
Mark Applied
Hide
Cyber Security Engineer 3
Bethesda, Maryland, United States
OnsiteFull Time
6+ YOEActive TS/SCI clearance, 6+ years cybersecurity experience, DoD 8570.01-M IAT/IASAE Level II certification, RMF/DoD security knowledge, vulnerability scanning and mitigation, EMASS/XACTA familiarity.
SCAP, STIG Viewer, ACAS, OWASP, Fortify, SonarQube, Tenable, XACTA, eMASS, Microsoft Windows, Linux/UNIX, Python, Java, React, GitLab, Jira, Confluence, OIDC, OAuth2, Kubernetes, Rancher, Strimzi, Cloudera, Active Directory, Bash, PowerShell
2mo
Save
Mark Applied
Hide
Staff, Application Security Engineer - Product Security
Bentonville or Herndon
$110k-$220k/yr OnsiteFull Time
4+ YOE4+ years application security experience with Bachelor's or 6+ years without; expertise in secure architecture, threat modeling, SAST/SCA, OWASP, automation of security validation, and strong communication skills.
SAST, SCA, OWASP
2w
Save
Mark Applied
Hide
Application Security Senior Manager
Annapolis Junction, Maryland, United States
$125k-$233k/yr RemoteFull Time
10+ YOE5+ Mgmt10+ years in application development and software security,5+ years leading technical teams,experience across SDLC,DAST/SAST/IAST/SCA,CI/CD and AI scanning (Mythos),knowledge of OWASP/NIST,Bachelor's degree.
DAST, SAST, IAST, SCA, CI/CD, Mythos, OWASP, NIST, Frontier AI
1mo
Save
Mark Applied
Hide
Software Security Engineer- Cloud/GovCloud (Top Secret cleared)
Reston or United States
$81k-$139k/yr RemoteFull Time
2+ YOEActive Top Secret clearance, 2+ years application security or secure software development experience, secure code review and vulnerability assessment experience, knowledge of cloud (AWS) security and federal/DoD requirements.
AWS, AWS GovCloud, SAST, DAST, SCA, OWASP, NIST, DoD STIGs, DevSecOps