76 appsec jobs at 46 companies in Takoma Park, MD
4w
Save
Mark Applied
Hide
Senior Product Manager, AppSec
McLean or Richmond or San Jose or New York City or Plano
$209k-$286k/yr OnsiteFull Time
6+ YOERequires 6+ years in cybersecurity or IT, 3+ years translating security strategy into product requirements, and 3+ years in application security. High school diploma or GED required; bachelor's degree preferred.
SAST, DAST, SCA, DevSecOps, AppSec, AI agents, SDLC, SLA, CISSP, CISM, OSCP, APIs, Web, Mobile, Containers, IaC, CI/CD, OWASP Top 10, Slack, Penetration Testing
1mo
Save
Mark Applied
Hide
Staff AppSec Engineer
Washington or United States
$210k-$230k/yr RemoteFull Time
6+ YOE6+ years in application/product security, hands-on Python code review, vulnerability management, deep AWS security experience (Lambda, Control Tower), experience integrating AI tools, strong communication; Bachelor's preferred.
GitHub Advanced Security, GitHub Actions, GitHub Copilot, Python, Terraform, AWS, AWS Lambda, DynamoDB, S3, SNS, SQS, IAM, VPCs, AWS Control Tower, ChatGPT, Snowflake, SQL
1d
Save
Mark Applied
Hide
Security Engineer, AWS AppSec
Herndon or Seattle
$136k-$184k/yr OnsiteFull Time
Bachelor's degree in engineering, computer science, or related field; security engineering experience; web security knowledge; coding or scripting ability; and experience with application security, testing, or incident response.
AWS, Java, C++, Python
1mo
Save
Mark Applied
Hide
Web Application Security Engineer (AppSec / DevSecOps)
Washington, District of Columbia, United States
HybridFull Time
Experience in application security, secure SDLC, vulnerability assessment, WAF, CI/CD/DevSecOps integration, and familiarity with federal frameworks (NIST, FedRAMP); Public Trust clearance or ability to obtain.
SAST, DAST, Software Composition Analysis (SCA), Web Application Firewall (WAF), CI/CD, DevSecOps, AWS, Microsoft Azure, OWASP Top 10, NIST, FedRAMP
1mo
Save
Mark Applied
Hide
Sr. Manager, Application Security
Bethesda or United States
$110k-$190k/yr HybridFull Time
7+ YOE4+ Mgmt7+ years IT/security experience with 4+ years security leadership, bachelor\u0002s degree or equivalent, experience with AppSec testing (SAST/DAST/IAST), SCA, release management, and GitHub/JIRA/ServiceNow/Jenkins/Harness.
GitHub, JIRA, ServiceNow, Jenkins, Harness, SAST, DAST, IAST, SCA, OWASP, MITRE CVE/CWE
2mo
Save
Mark Applied
Hide
Enterprise Cybersecurity Product Analyst
McLean, Virginia, United States
$87k-$198k/yr OnsiteFull Time
3+ YOE3+ years in product/security/appsec roles; experience with architecture/design reviews, threat modeling, secure-by-design principles; ability to obtain Secret clearance; Bachelor's degree required; strong communication and tracking skills.
1mo
Save
Mark Applied
Hide
Security Architect
Washington or Cleveland or California or Colorado or Hawaii or Illinois or Maine or Maryland or Massachusetts or Minnesota or New Jersey or New York or Vermont or Virginia or Washington
$135k-$279k/yr OnsiteFull Time
12+ YOE12+ years progressive cybersecurity experience with leadership across SOC, incident response, detection, vulnerability management, engineering, and AppSec; enterprise security program experience; US citizenship and clearance eligibility; up to 25% travel.
NIST, RMF, Zero Trust, AWS, Microsoft Azure, GCP, SOAR, AI, ML
3w
Save
Mark Applied
Hide
DevSecOps Engineer (Secret Clearance)
Washington, District of Columbia, United States
$108k-$188k/yr OnsiteFull Time
4+ YOEBachelor's in CS/cyber/IT/engineering/math,local to DMV with ability to work onsite up to 5 days/week,4+ years DevSecOps,4+ years CI/CD (Jenkins/GitLab CI/GitHub Actions/Azure DevOps),3+ cloud/IaC,2+ appsec integration,US work authorization required.
Jenkins, GitLab CI, GitHub Actions, Azure DevOps, Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), Terraform, AWS CloudFormation, Ansible, Docker, Kubernetes, OpenShift, SonarQube, Snyk, Prisma Cloud, Aqua, Python, PowerShell, Bash, Go
2w
Save
Mark Applied
Hide
Vulnerability Assessment & Penetration Testing Specialist ? Level III (DC, Washington)
Washington, District of Columbia, United States
OnsiteFull Time
7+ YOEActive TS/SCI clearance, 7+ years penetration testing and vulnerability assessment experience in federal/IC environments, CEH and CISSP required, bachelor\u0002s in relevant discipline, secure code review and cloud security experience.
MITRE ATT&CK, OWASP, NIST, PTES, Burp Suite Professional, Nessus, ACAS, Nmap, Metasploit Framework, Wireshark, Kali Linux, WebInspect, Nikto, SonarQube, GitLab Security, Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), DISA Security Technical Implementation Guides (STIGs), Docker, Kubernetes, AWS, Azure, Google Cloud
3w
Save
Mark Applied
Hide
ICAM Architect (Identity, Credential, and Access Management)
Alexandria, Virginia, United States
$150k-$180k/yr HybridFull Time
10+ YOEUS citizen with active Secret clearance,10+ years in engineering/architecture/consulting focused on zero trust and ICAM,experience with multiple ICAM products,knowledge of FEA/TOGAF/OWASP/UML,and strong communication skills.
Radiant Logic, Ping, Nok Nok, SailPoint, CyberArk, BeyondTrust, ForgeRock, Federal Enterprise Architecture (FEA), TOGAF, Zachmann Framework, OWASP, UML, J2EE, JSP, Servlets
1w
Save
Mark Applied
Hide
Application Security Engineer (Full Scope Poly)
Reston, Virginia, United States
OnsiteFull Time
8+ YOERequires U.S. citizenship, TS/SCI clearance with polygraph, 8+ years in application security or related fields, bachelor's degree, secure SDLC and cloud-native experience, and proficiency with listed security technologies and standards.
Oracle Cloud, Python, JavaScript, SQL, Shell, PL/SQL, SAST, DAST, SCA, Kubernetes, Docker, REST APIs, CI/CD, Oracle Cloud Infrastructure (OCI), NIST RMF, NIST Secure Software Development Framework, OWASP, DISA STIGs, Oracle RDBMS, Agile
1mo
Save
Mark Applied
Hide
Cleared Penetration Tester
Herndon or Seattle
$130k-$160k/yr HybridFull Time
3+ YOEActive Top Secret clearance or ability to obtain,3+ years web application and network penetration testing,2+ years professional services experience,proficient with scripting (bash,python,PowerShell,ruby),knowledge of OWASP/MITRE ATT&CK/OSSTMM/PTES.
bash, python, PowerShell, ruby, OWASP, MITRE ATT&CK, OSSTMM, PTES
2mo
Save
Mark Applied
Hide
Jr Salesforce Developer
Herndon or United States
RemoteFull Time
3+ YOEBachelor's in IT/Information Systems (or 5 years' experience), 3+ years' experience, Salesforce Admin & Developer certs required, proficient in Apex, Visualforce, LWC, SOQL/SOSL, JavaScript, MuleSoft, Copado, APIs, and Agile/SAFe; U.S. citizenship and clearance eligibility required.
Apex, Visualforce, Lightning, Lightning Web Components, SOQL, SOSL, JavaScript, SOAP, REST, MuleSoft, Copado, Salesforce, SharePoint, JAWS, Microsoft Azure, OWASP, GitHub, SSDT, MS SSRS
3d
Save
Mark Applied
Hide
Cyber Security Engineer 2
Bethesda, Maryland, United States
OnsiteFull Time
3+ YOERequires active TS/SCI clearance, ability to obtain CI polygraph, bachelor's degree with 3 years' experience or equivalent, and DoD IASAE Level II certification. Experience with RMF, vulnerability management, secure systems, and cybersecurity tools.
SCAP, STIG Viewer, ACAS, OWASP, Fortify, SonarQube, Tenable, XACTA, eMASS, Microsoft Windows, Linux/UNIX, TCP/IP, CI/CD, Python, Java, React, GitLab, Jira, Confluence, OIDC, OAuth2, Kubernetes, Rancher, Strimzi, Cloudera, Active Directory, Bash, PowerShell
2mo
Save
Mark Applied
Hide
Senior Microelectronics Engineer
Alexandria, Virginia, United States
OnsiteFull Time
10+ YOE10+ years technical leadership in semiconductor R&D; experience in integrated circuit and embedded system design, micro-electronics analysis, system security, cryptography/key management, testing and evaluation; current TS/SCI clearance and MS in related field.
Field-programmable gate array (FPGA), ASIC verification, Microcode, Software Security
1d
Save
Mark Applied
Hide
Identity and Access Management (IAM) Senior Consultant (Cloud exp. required)
Denver or Washington or Chicago
$140k-$200k/yr OnsiteFull Time
10+ YOERequires 10+ years in IAM, information security, cloud technology, technology risk, enterprise architecture, or related disciplines; expertise in public cloud IAM, AI risks, security frameworks, assessments, governance, and executive communication.
AWS, Microsoft Azure, Google Cloud Platform, Generative AI, Agentic AI, NIST, COBIT, ISO, NIST AI Risk Management Framework, NIST Cybersecurity Framework, MITRE ATLAS, OWASP, ISO 27001, Microsoft Azure
2d
Save
Mark Applied
Hide
Identity and Access Management (IAM) Senior Consultant (Cloud exp. required)
Denver or Washington or Chicago
$140k-$200k/yr OnsiteFull Time
10+ YOERequires 10+ years in IAM, information security, cloud technology, technology risk, enterprise architecture, or public cloud security, plus expertise in cloud IAM, AI risks, security frameworks, assessments, governance, and executive communication.
AWS, Microsoft Azure, Google Cloud Platform, NIST, COBIT, ISO, NIST AI Risk Management Framework, NIST Cybersecurity Framework, MITRE ATLAS, OWASP, ISO 27001
4d
Save
Mark Applied
Hide
STIP Senior Software Tester
Springfield or Arlington
RemoteFull Time
15+ YOEBachelor's degree and 15+ years of software testing experience; expertise in programming, APIs, databases, automation, Agile, security standards, and modern software architectures.
Java, C#, C++, ASP.NET, Python, JavaScript, SAFe, GitHub, JIRA, Git, OWASP, NIST, Spring MVC, Spring Boot, Scala, Http4s, ETL, Node.js, React, Angular, Vue.js, PostgreSQL, MySQL, MongoDB, RESTful APIs, Docker, Kubernetes, Postman, Scrum, Kanban, AWS, Microsoft Azure, Google Cloud Platform, Jenkins, GitLab CI/CD, GitHub Actions, JUnit, PyTest, Jest, Infrastructure as Code (IaC)
3w
Save
Mark Applied
Hide
Senior Security Engineer, AI/ML, National Security, Public Sector
Washington or Fort Meade or Maryland
$174k-$253k/yr OnsiteFull Time
5+ YOEBachelor's in CS/Data Science/AI or equivalent,5+ years in AI/ML or software development,5+ years with Docker,Kubernetes,Python and ML libraries,active Top Secret/SCI clearance with polygraph,ability to travel up to 25%.
Docker, Kubernetes, Python, PyTorch, TensorFlow, Hugging Face Transformers, vLLM, NVIDIA Triton, Ollama, Google Vertex AI, Google Cloud Platform (GCP), MITRE ATLAS, OWASP, STRIDE
10h
Save
Mark Applied
Hide
Customer Success Engineer - America
Austin or Barcelona or Bochum or Dubai or Geneva or London or Singapore or Tokyo or Washington, D.C.
OnsiteFull Time
Hands-on DevOps, software engineering, or platform experience with CI/CD and Git; strong business, communication, analytical, and customer-facing skills. English fluency required; Spanish or Portuguese desirable.
Claude Code, Codex, Cursor, GitHub Copilot, Gemini, Devin, SonarQube, SonarSweep, Sonar Context Augmentation, CI/CD, Git, Java, Linux, SAST, AppSec