55 appsec jobs at 43 companies in Vienna, VA

2mo
Save
Mark Applied
Hide
Lead AppSec Engineer
Los Angeles or Washington or United States
$150k-$220k/yr RemoteFull Time
Virtualitics
Virtualitics: Provides an AI-native platform for readiness and analytics.
Technical leadership in application security with hands-on AI/ML experience, threat modeling, cloud and container security (AWS/GCP/Azure, Docker, Kubernetes), familiarity with SAST/DAST/container scanning and security platforms (Wiz, Snyk, GitHub Advanced Security), and experience designing secure AI workflows.
Claude Code, Cursor, AWS, GCP, Azure, Docker, Kubernetes, Wiz, Snyk, GitHub Advanced Security, SAST, DAST, container scanning, CI/CD
1mo
Save
Mark Applied
Hide
Staff AppSec Engineer
Washington or United States
$210k-$230k/yr RemoteFull Time
Upside
Upside: Personalized cashback rewards platform for everyday brick-and-mortar purchases.
6+ YOE6+ years in application/product security, hands-on Python code review, vulnerability management, deep AWS security experience (Lambda, Control Tower), experience integrating AI tools, strong communication; Bachelor's preferred.
GitHub Advanced Security, GitHub Actions, GitHub Copilot, Python, Terraform, AWS, AWS Lambda, DynamoDB, S3, SNS, SQS, IAM, VPCs, AWS Control Tower, ChatGPT, Snowflake, SQL
1mo
Save
Mark Applied
Hide
Web Application Security Engineer (AppSec / DevSecOps)
Washington, District of Columbia, United States
HybridFull Time
Essnova Solutions
Essnova Solutions: Provides professional and technical services to government entities.
Experience in application security, secure SDLC, vulnerability assessment, WAF, CI/CD/DevSecOps integration, and familiarity with federal frameworks (NIST, FedRAMP); Public Trust clearance or ability to obtain.
SAST, DAST, Software Composition Analysis (SCA), Web Application Firewall (WAF), CI/CD, DevSecOps, AWS, Microsoft Azure, OWASP Top 10, NIST, FedRAMP
2w
Save
Mark Applied
Hide
Sr. Manager, Application Security
Bethesda or United States
$110k-$190k/yr HybridFull Time
Marriott International
Marriott InternationalNASDAQ: MAR: Operates and franchises a global network of hotels and resorts.
7+ YOE4+ Mgmt7+ years IT/security experience with 4+ years security leadership, bachelor\u0002s degree or equivalent, experience with AppSec testing (SAST/DAST/IAST), SCA, release management, and GitHub/JIRA/ServiceNow/Jenkins/Harness.
GitHub, JIRA, ServiceNow, Jenkins, Harness, SAST, DAST, IAST, SCA, OWASP, MITRE CVE/CWE
6d
Save
Mark Applied
Hide
Application Security Engineer
Tysons, Virginia, United States
$92k-$124k/yr HybridFull Time
Veilant
Veilant: Protecting operations, personnel, and data from emerging surveillance threats.
2+ YOE2+ years Java development, hands-on AppSec testing, secure code review, CI/CD and container security experience, ability to obtain security clearance.
Burp Suite, Java Spring Boot, Angular, REST, PostgreSQL, JWT, OAuth, Entra, Keycloak, GitLab CI, Azure DevOps, GitHub Actions, Kubernetes, Trivy, Kubesec, Falco, NeuVector, Azure, AWS, GitLab Secrets Manager, AWS KMS, Azure Key Vault, Ansible Vault, SAST, DAST, SCA, Infrastructure-as-Code (IaC)
1mo
Save
Mark Applied
Hide
Security Architect
Washington or Cleveland or California or Colorado or Hawaii or Illinois or Maine or Maryland or Massachusetts or Minnesota or New Jersey or New York or Vermont or Virginia or Washington
$135k-$279k/yr OnsiteFull Time
Accenture Federal Services
Accenture Federal ServicesNYSE: ACN: Provides technology and consulting services to U.S. federal agencies.
12+ YOE12+ years progressive cybersecurity experience with leadership across SOC, incident response, detection, vulnerability management, engineering, and AppSec; enterprise security program experience; US citizenship and clearance eligibility; up to 25% travel.
NIST, RMF, Zero Trust, AWS, Microsoft Azure, GCP, SOAR, AI, ML
1mo
Save
Mark Applied
Hide
Enterprise Cybersecurity Product Analyst
McLean, Virginia, United States
$87k-$198k/yr OnsiteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
3+ YOE3+ years in product/security/appsec roles; experience with architecture/design reviews, threat modeling, secure-by-design principles; ability to obtain Secret clearance; Bachelor's degree required; strong communication and tracking skills.
1w
Save
Mark Applied
Hide
Web Developer Security Engineer
Chantilly or United States
$120k-$135k/yr OnsiteFull Time
Applied Intellect
Applied Intellect: Provides professional, technical, and human services to government agencies.
3+ YOE3+ years in web application or application security, proficiency with .NET/C#, modern web stacks, WAF/FIM, log analysis, DevSecOps automation, and current AppSec/offensive/foundational certifications; bachelor\u0002s degree required.
.NET, C#, MVC, WCF, HTML5, CSS3, JavaScript, REST APIs, SQL, GitHub Copilot, OpenAI API/Codex, Python, Node.js, Java, React.js, TypeScript, OWASP Top 10, WAF, FIM, Wireshark, SIEM, IDS/IPS, NDR, EDR, Docker, Kubernetes, AWS
3w
Save
Mark Applied
Hide
Web Developer Security Engineer
Washington, District of Columbia, United States
HybridFull Time
CMT Services
CMT Services: Provides management and technology consulting to government entities.
3+ YOE3+ years in web application security/AppSec/SSDLC, hands-on secure development, DevSecOps automation, WAF and FIM management, log/SIEM analysis, OWASP Top 10 mitigation, scripting for automation, and compliance with NIST/FedRAMP.
GitHub Copilot, OpenAI API/Codex, Python, JavaScript/Node.js, Java, React.js, TypeScript, .NET (C# MVC, WCF), HTML5, CSS3, JavaScript, REST APIs, SQL, Wireshark, SIEM, IDS/IPS, NDR, EDR, WAF, File Integrity Monitoring (FIM)
6d
Save
Mark Applied
Hide
DevSecOps Engineer (Secret Clearance)
Washington, District of Columbia, United States
$108k-$188k/yr OnsiteFull Time
Deloitte
Deloitte: Provides professional audit, consulting, advisory, and tax services.
4+ YOEBachelor's in CS/cyber/IT/engineering/math,local to DMV with ability to work onsite up to 5 days/week,4+ years DevSecOps,4+ years CI/CD (Jenkins/GitLab CI/GitHub Actions/Azure DevOps),3+ cloud/IaC,2+ appsec integration,US work authorization required.
Jenkins, GitLab CI, GitHub Actions, Azure DevOps, Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), Terraform, AWS CloudFormation, Ansible, Docker, Kubernetes, OpenShift, SonarQube, Snyk, Prisma Cloud, Aqua, Python, PowerShell, Bash, Go
6d
Save
Mark Applied
Hide
ICAM Architect (Identity, Credential, and Access Management)
Alexandria, Virginia, United States
$150k-$180k/yr HybridFull Time
UberEther
UberEther: Provides identity management and compliance solutions for federal agencies.
10+ YOEUS citizen with active Secret clearance,10+ years in engineering/architecture/consulting focused on zero trust and ICAM,experience with multiple ICAM products,knowledge of FEA/TOGAF/OWASP/UML,and strong communication skills.
Radiant Logic, Ping, Nok Nok, SailPoint, CyberArk, BeyondTrust, ForgeRock, Federal Enterprise Architecture (FEA), TOGAF, Zachmann Framework, OWASP, UML, J2EE, JSP, Servlets
1w
Save
Mark Applied
Hide
Cleared Penetration Tester
Herndon or Seattle
$130k-$160k/yr HybridFull Time
Fortreum
Fortreum: Provides cybersecurity compliance and technical auditing services for regulated industries.
3+ YOEActive Top Secret clearance or ability to obtain,3+ years web application and network penetration testing,2+ years professional services experience,proficient with scripting (bash,python,PowerShell,ruby),knowledge of OWASP/MITRE ATT&CK/OSSTMM/PTES.
bash, python, PowerShell, ruby, OWASP, MITRE ATT&CK, OSSTMM, PTES
1w
Save
Mark Applied
Hide
Full-Stack Software Developer (Contingent)
Springfield, Virginia, United States
OnsiteFull Time
Sphinx
Sphinx: Cybersecurity and intelligence services for national security missions.
8+ YOEActive TS/SCI with CI Polygraph, U.S. citizenship, BS in Computer Science, 8+ years full‑stack development, DevSecOps/CI/CD, secure coding (OWASP,NIST), Docker/Kubernetes, DoD 8140/CompTIA Security+ or equivalent.
React, Angular, Vue, Python, Java, Docker, Kubernetes, Terraform, Ansible, Iron Bank, DCAR, OWASP, NIST 800-53, NIST 800-207
1mo
Save
Mark Applied
Hide
Senior Microelectronics Engineer
Alexandria, Virginia, United States
OnsiteFull Time
Modern Technology Solutions, Inc.
Modern Technology Solutions, Inc.: Provides engineering, technology, and cybersecurity services for national security.
10+ YOE10+ years technical leadership in semiconductor R&D; experience in integrated circuit and embedded system design, micro-electronics analysis, system security, cryptography/key management, testing and evaluation; current TS/SCI clearance and MS in related field.
Field-programmable gate array (FPGA), ASIC verification, Microcode, Software Security
2mo
Save
Mark Applied
Hide
SOC Analyst
Fairfax, Virginia, United States
OnsiteFull Time
ASM Research
ASM ResearchNYSE: ACN: Provides IT and healthcare services to government agencies.
5+ YOE5+ years in Cyber Security with security event monitoring and incident response; degree in IT; CISSP/CISM/CySA+/GCIH desired.
Tenable, Splunk, Microsoft Defender, SIEM, Symantec DLP, Netsparker, Penetration Testing, ServiceNow, Web Application Security, Data Loss Prevention, Incident Response, Forensics, Security Tool Evaluation, Endpoint Protection
6d
Save
Mark Applied
Hide
Application Security Senior Manager
Annapolis Junction, Maryland, United States
$125k-$233k/yr RemoteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Consulting and technology services for government and commercial clients
10+ YOE5+ Mgmt10+ years in application development and software security,5+ years leading technical teams,experience across SDLC,DAST/SAST/IAST/SCA,CI/CD and AI scanning (Mythos),knowledge of OWASP/NIST,Bachelor's degree.
DAST, SAST, IAST, SCA, CI/CD, Mythos, OWASP, NIST, Frontier AI
1w
Save
Mark Applied
Hide
Senior Cloud Engineer
Washington, District of Columbia, United States
OnsiteFull Time
OneGlobe
OneGlobe: Provides IT solutions and cloud engineering to federal agencies.
8+ YOEU.S. citizenship for DHS suitability, 8+ years cloud/platform engineering experience with AWS, containers, CI/CD, security (FISMA High/OWASP), strong communication and mentorship skills.
AWS, Serverless, Kubernetes, Docker, ECS, VMWare, Jenkins, GitLab CI, Git, SQL, NoSQL, OWASP
1w
Save
Mark Applied
Hide
Senior Security Engineer, AI/ML, National Security, Public Sector
Washington or Fort Meade or Maryland
$174k-$253k/yr OnsiteFull Time
Google
GoogleNASDAQ: GOOGL: Provides online search, advertising, cloud computing, and consumer electronics.
5+ YOEBachelor's in CS/Data Science/AI or equivalent,5+ years in AI/ML or software development,5+ years with Docker,Kubernetes,Python and ML libraries,active Top Secret/SCI clearance with polygraph,ability to travel up to 25%.
Docker, Kubernetes, Python, PyTorch, TensorFlow, Hugging Face Transformers, vLLM, NVIDIA Triton, Ollama, Google Vertex AI, Google Cloud Platform (GCP), MITRE ATLAS, OWASP, STRIDE
5d
Save
Mark Applied
Hide
Senior Backend Developer (Java / Integrations)
Falls Church, Virginia, United States
$90k-$150k/yr HybridFull Time
BizFlow
BizFlow: Provides low-code software for business process management and automation.
10+ YOE10+ years backend development with strong Java and SQL, experience building REST/SOAP integrations, mentoring developers, troubleshooting across application/database/server layers, and familiarity with enterprise systems.
Java (Java 11+), Spring Framework, Spring Boot, Hibernate/JPA, Querydsl, Spring Integration, Apache Camel, BizFlow M, BizFlow AppDev, Oracle, Microsoft SQL Server, RESTful APIs, SOAP Web Services, gRPC, JSON, XML, SAML, OAuth 2.0, JWT, mTLS, OWASP, Tomcat, WildFly/JBoss, Docker, AWS, Git, GitHub, Jira, Confluence, Microsoft SharePoint, Postman, Jenkins, GitHub Actions
2mo
Save
Mark Applied
Hide
Jr Salesforce Developer
Herndon or United States
RemoteFull Time
BDR Solutions
BDR Solutions: Provider of IT, engineering, and consulting for federal agencies.
3+ YOEBachelor's in IT/Information Systems (or 5 years' experience), 3+ years' experience, Salesforce Admin & Developer certs required, proficient in Apex, Visualforce, LWC, SOQL/SOSL, JavaScript, MuleSoft, Copado, APIs, and Agile/SAFe; U.S. citizenship and clearance eligibility required.
Apex, Visualforce, Lightning, Lightning Web Components, SOQL, SOSL, JavaScript, SOAP, REST, MuleSoft, Copado, Salesforce, SharePoint, JAWS, Microsoft Azure, OWASP, GitHub, SSDT, MS SSRS