32 appsec jobs at 27 companies in Virginia

6d
Save
Mark Applied
Hide
Application Security Engineer
Tysons, Virginia, United States
$92k-$124k/yr HybridFull Time
Veilant
Veilant: Protecting operations, personnel, and data from emerging surveillance threats.
2+ YOE2+ years Java development, hands-on AppSec testing, secure code review, CI/CD and container security experience, ability to obtain security clearance.
Burp Suite, Java Spring Boot, Angular, REST, PostgreSQL, JWT, OAuth, Entra, Keycloak, GitLab CI, Azure DevOps, GitHub Actions, Kubernetes, Trivy, Kubesec, Falco, NeuVector, Azure, AWS, GitLab Secrets Manager, AWS KMS, Azure Key Vault, Ansible Vault, SAST, DAST, SCA, Infrastructure-as-Code (IaC)
1mo
Save
Mark Applied
Hide
AI Security Engineer - Mid-Atlantic region (Remote in VA, MD, PA, NC, DE, NJ, or DC)
Virginia or Maryland or Pennsylvania or North Carolina or Delaware or New Jersey or District of Columbia or United States
RemoteFull Time
GuidePoint Security
GuidePoint Security: Provides cybersecurity consulting, managed services, and integrated technology solutions.
5+ YOE5+ years in security engineering (cloud/AppSec focus), hands-on experience with agentic AI and AI/ML security, familiarity with cloud AI services, Python proficiency, threat modeling and strong communication skills.
OWASP LLM Top 10, MITRE ATLAS, OpenAI, Azure OpenAI, AWS Bedrock, AWS SageMaker, Azure AI Foundry, Google Vertex, Python, Claude Code, Open Code, Cursor, Codex, Cedar, Rego, AWS CloudFormation, Terraform, OpenTofu, Greenhouse Software, Zoom Scheduler
1mo
Save
Mark Applied
Hide
Security Architect
Washington or Cleveland or California or Colorado or Hawaii or Illinois or Maine or Maryland or Massachusetts or Minnesota or New Jersey or New York or Vermont or Virginia or Washington
$135k-$279k/yr OnsiteFull Time
Accenture Federal Services
Accenture Federal ServicesNYSE: ACN: Provides technology and consulting services to U.S. federal agencies.
12+ YOE12+ years progressive cybersecurity experience with leadership across SOC, incident response, detection, vulnerability management, engineering, and AppSec; enterprise security program experience; US citizenship and clearance eligibility; up to 25% travel.
NIST, RMF, Zero Trust, AWS, Microsoft Azure, GCP, SOAR, AI, ML
1mo
Save
Mark Applied
Hide
Enterprise Cybersecurity Product Analyst
McLean, Virginia, United States
$87k-$198k/yr OnsiteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
3+ YOE3+ years in product/security/appsec roles; experience with architecture/design reviews, threat modeling, secure-by-design principles; ability to obtain Secret clearance; Bachelor's degree required; strong communication and tracking skills.
1w
Save
Mark Applied
Hide
Web Developer Security Engineer
Chantilly or United States
$120k-$135k/yr OnsiteFull Time
Applied Intellect
Applied Intellect: Provides professional, technical, and human services to government agencies.
3+ YOE3+ years in web application or application security, proficiency with .NET/C#, modern web stacks, WAF/FIM, log analysis, DevSecOps automation, and current AppSec/offensive/foundational certifications; bachelor\u0002s degree required.
.NET, C#, MVC, WCF, HTML5, CSS3, JavaScript, REST APIs, SQL, GitHub Copilot, OpenAI API/Codex, Python, Node.js, Java, React.js, TypeScript, OWASP Top 10, WAF, FIM, Wireshark, SIEM, IDS/IPS, NDR, EDR, Docker, Kubernetes, AWS
6d
Save
Mark Applied
Hide
ICAM Architect (Identity, Credential, and Access Management)
Alexandria, Virginia, United States
$150k-$180k/yr HybridFull Time
UberEther
UberEther: Provides identity management and compliance solutions for federal agencies.
10+ YOEUS citizen with active Secret clearance,10+ years in engineering/architecture/consulting focused on zero trust and ICAM,experience with multiple ICAM products,knowledge of FEA/TOGAF/OWASP/UML,and strong communication skills.
Radiant Logic, Ping, Nok Nok, SailPoint, CyberArk, BeyondTrust, ForgeRock, Federal Enterprise Architecture (FEA), TOGAF, Zachmann Framework, OWASP, UML, J2EE, JSP, Servlets
1w
Save
Mark Applied
Hide
Cleared Penetration Tester
Herndon or Seattle
$130k-$160k/yr HybridFull Time
Fortreum
Fortreum: Provides cybersecurity compliance and technical auditing services for regulated industries.
3+ YOEActive Top Secret clearance or ability to obtain,3+ years web application and network penetration testing,2+ years professional services experience,proficient with scripting (bash,python,PowerShell,ruby),knowledge of OWASP/MITRE ATT&CK/OSSTMM/PTES.
bash, python, PowerShell, ruby, OWASP, MITRE ATT&CK, OSSTMM, PTES
1w
Save
Mark Applied
Hide
Full-Stack Software Developer (Contingent)
Springfield, Virginia, United States
OnsiteFull Time
Sphinx
Sphinx: Cybersecurity and intelligence services for national security missions.
8+ YOEActive TS/SCI with CI Polygraph, U.S. citizenship, BS in Computer Science, 8+ years full‑stack development, DevSecOps/CI/CD, secure coding (OWASP,NIST), Docker/Kubernetes, DoD 8140/CompTIA Security+ or equivalent.
React, Angular, Vue, Python, Java, Docker, Kubernetes, Terraform, Ansible, Iron Bank, DCAR, OWASP, NIST 800-53, NIST 800-207
1mo
Save
Mark Applied
Hide
Senior Microelectronics Engineer
Alexandria, Virginia, United States
OnsiteFull Time
Modern Technology Solutions, Inc.
Modern Technology Solutions, Inc.: Provides engineering, technology, and cybersecurity services for national security.
10+ YOE10+ years technical leadership in semiconductor R&D; experience in integrated circuit and embedded system design, micro-electronics analysis, system security, cryptography/key management, testing and evaluation; current TS/SCI clearance and MS in related field.
Field-programmable gate array (FPGA), ASIC verification, Microcode, Software Security
2mo
Save
Mark Applied
Hide
SOC Analyst
Fairfax, Virginia, United States
OnsiteFull Time
ASM Research
ASM ResearchNYSE: ACN: Provides IT and healthcare services to government agencies.
5+ YOE5+ years in Cyber Security with security event monitoring and incident response; degree in IT; CISSP/CISM/CySA+/GCIH desired.
Tenable, Splunk, Microsoft Defender, SIEM, Symantec DLP, Netsparker, Penetration Testing, ServiceNow, Web Application Security, Data Loss Prevention, Incident Response, Forensics, Security Tool Evaluation, Endpoint Protection
5d
Save
Mark Applied
Hide
Senior Backend Developer (Java / Integrations)
Falls Church, Virginia, United States
$90k-$150k/yr HybridFull Time
BizFlow
BizFlow: Provides low-code software for business process management and automation.
10+ YOE10+ years backend development with strong Java and SQL, experience building REST/SOAP integrations, mentoring developers, troubleshooting across application/database/server layers, and familiarity with enterprise systems.
Java (Java 11+), Spring Framework, Spring Boot, Hibernate/JPA, Querydsl, Spring Integration, Apache Camel, BizFlow M, BizFlow AppDev, Oracle, Microsoft SQL Server, RESTful APIs, SOAP Web Services, gRPC, JSON, XML, SAML, OAuth 2.0, JWT, mTLS, OWASP, Tomcat, WildFly/JBoss, Docker, AWS, Git, GitHub, Jira, Confluence, Microsoft SharePoint, Postman, Jenkins, GitHub Actions
2mo
Save
Mark Applied
Hide
Jr Salesforce Developer
Herndon or United States
RemoteFull Time
BDR Solutions
BDR Solutions: Provider of IT, engineering, and consulting for federal agencies.
3+ YOEBachelor's in IT/Information Systems (or 5 years' experience), 3+ years' experience, Salesforce Admin & Developer certs required, proficient in Apex, Visualforce, LWC, SOQL/SOSL, JavaScript, MuleSoft, Copado, APIs, and Agile/SAFe; U.S. citizenship and clearance eligibility required.
Apex, Visualforce, Lightning, Lightning Web Components, SOQL, SOSL, JavaScript, SOAP, REST, MuleSoft, Copado, Salesforce, SharePoint, JAWS, Microsoft Azure, OWASP, GitHub, SSDT, MS SSRS
1mo
Save
Mark Applied
Hide
Senior Software Engineer
San Francisco or Knoxville or New York City or Arizona or California or Colorado or Connecticut or Florida or Georgia or Illinois or Louisiana or Massachusetts or Minnesota or North Carolina or New Jersey or Nevada or New York or Ohio or Pennsylvania or South Carolina or Tennessee or Texas or Washington or Virginia or District of Columbia
$150k-$224k/yr RemoteFull Time
Verana Health
Verana Health: Curates real-world clinical data to accelerate medical research and insights.
5+ YOE5+ years backend development with Java and Spring Boot, experience with AWS, Docker, Kubernetes, CI/CD, TDD/JUnit, REST/microservices, observability (Datadog, CloudWatch, OpenTelemetry), mentoring skills, and experience with RDBMS, Elasticsearch and NoSQL.
Java, Spring Boot, AWS, GHA, Jenkins, Docker, Kubernetes, JUnit, TDD, REST, OAuth 2.0, OWASP, Elasticsearch, NoSQL, Datadog, CloudWatch, OpenTelemetry, React, WebSockets, Python, Kafka, SQS, CI/CD
1mo
Save
Mark Applied
Hide
Penetration Tester (Part Time & Remote)
Sterling or United States
$50-$85/hr RemotePart Time, Contract
TestPros
TestPros: Provides independent IT assessment and cybersecurity compliance services.
5+ YOEMinimum 5 years penetration testing experience; proficiency with CLI, scripting (Python, Bash, PowerShell, C/C++), commercial and open-source pentest tools; desired Security+, CEH, GPEN, OSCP, AWS certifications; strong communication and consulting skills.
Windows, macOS, Linux, Python, Bash, PowerShell, C/C++, Metasploit, Nikto, SQLMAP, Responder, Nessus, Netcat, Burp Suite, OWASP, OSSTMM, PTES, FedRAMP, NIST
4d
Save
Mark Applied
Hide
Sr. DevSecOps Engineer III (6735)
Reston, Virginia, United States
$200k-$220k/yr OnsiteFull Time
MetroStar
MetroStar: Provides digital transformation and IT services to government agencies.
10+ YOEActive TS/SCI with CI poly,10+ years DevSecOps experience, expertise in CI/CD, IaC, containerization, AWS, scripting, STIG/SRG compliance, and government classified domains.
GitLab CI, Jenkins, Artifactory, SonarQube, Prisma Cloud, Python, Bash, RHEL, Oracle Linux, Terraform, CloudFormation, Ansible, GitLab Service Desk, ServiceNow, AWS, STIG, SRG, OWASP, NIST, OpenSCAP
1mo
Save
Mark Applied
Hide
Junior Software Developer
Springfield or Arlington
$40k-$80k/yr HybridFull Time
JRAD
JRAD: Provides technical research and defense support to federal agencies.
0+ YOEBachelor's in CS or related, 0-3 years software development experience, Java/Spring preferred, proficiency with OOP, data structures, REST/microservices, databases, containerization, Agile, and security standards; able to pass DHS suitability screening.
Java, C#, C++, ASP.Net, Python, JavaScript, Spring MVC, Spring Boot, SSO, Scala, Http4s, ETL, Node.js, React, Angular, Vue.js, PostgreSQL, MySQL, MongoDB, RESTful APIs, microservices, Docker, Kubernetes, Git, Github, JIRA, SAFe, AWS, Microsoft Azure, Google Cloud Platform, Jenkins, GitLab CI/CD, GitHub Actions, JUnit, PyTest, Jest, OWASP, Section 508, NIST
1mo
Save
Mark Applied
Hide
Integration & Test Automation Engineer (AI Platform)
Virginia, United States
$101k-$199k/yr RemoteFull Time
Arcfield
Arcfield: Systems engineering and mission support for defense and space.
2+ YOEDegree in CS/Engineering (BS/MS/PhD) with relevant years; 2–5 years testing/QA experience; proficiency with automated test frameworks (pytest, JUnit, Selenium/Cypress), REST APIs, microservices, Docker/Kubernetes, GitLab CI/CD, AWS/Azure; ability to obtain Secret clearance.
Python, Rust, Java, JavaScript, React, Redux, TypeScript, Bash, PowerShell, RegEx, AWS, Azure, Kubernetes, Docker, Terraform, CloudFormation, GitLab, Maven, Semgrep, yGuard, OWASP, DAST/IAST, pytest, JUnit, Jacoco, OTel, Grafana Stack, Prometheus, Grafana, MLflow, GPT models, Claude models, Embedding Models, LangChain, LlamaIndex, MCP, Cameo Systems Modeler, Teamwork Cloud, SysML v1, SysML v2
6d
Save
Mark Applied
Hide
Vulnerability Assessment & Penetration Testing Specialist ? Level III (VA, Quantico)
Quantico, Virginia, United States
OnsiteFull Time
RiVidium
RiVidium: Provides cybersecurity software and IT services to federal agencies.
7+ YOEActive TS/SCI clearance,7+ years experience in penetration testing/vulnerability assessment/software assurance,CEH and CISSP required,bachelor's degree,expertise with MITRE/OWASP/NIST and offensive security tools.
MITRE ATT&CK, OWASP, NIST, PTES, Burp Suite Professional, Nessus, ACAS, Nmap, Metasploit Framework, Wireshark, Kali Linux, WebInspect, Nikto, SonarQube, GitLab Security, Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), Docker, Kubernetes, AWS, Azure, Google Cloud
1mo
Save
Mark Applied
Hide
AI Security and Governance Lead
Washington or Los Angeles or Troy or New York or Houston or Chicago or Grand Rapids or Owings Mills or Baltimore or Columbia or Richmond or Memphis or Raleigh or Boston or San Jose or San Francisco or Austin or Kalamazoo or Spokane or Denver or Fort Worth or Atlanta or Orlando or Dallas or Wilmington or Phoenix or San Antonio or Milwaukee or Madison or McLean or Huntsville or Melville or Woodbridge or Stamford or Miami or Philadelphia or Charlotte or Greenville or West Palm Beach or Costa Mesa or St. Louis or Fort Lauderdale or Seattle or Rosemont or Pittsburgh or Tulsa or Cincinnati or Cleveland or Columbus or Akron or Cherry Hill or Tampa or Minneapolis or Anchorage or Salt Lake City or Norfolk or Jacksonville or Boulder or Nashville or Oak Brook or Las Vegas or Indianapolis or San Diego or Potomac or Walnut Creek or Daphne or Baton Rouge or Metairie or Grenada or Hattiesburg or Brentwood or Jackson or Miramar Beach or Tallahassee or Mobile
$151k-$193k/yr OnsiteFull Time
BDO USA
BDO USA: Provides accounting, tax, and business advisory services to organizations.
7+ YOEBachelor's in CS/IT/Cyber/Data Science required, 7+ years in enterprise architecture/security/governance or AI engineering, experience with Microsoft Azure AI platforms, AI risk assessments and governance frameworks, and leadership/mentoring experience.
Microsoft Azure, Azure AI, Azure OpenAI, Azure AI Foundry, LangChain, Semantic Kernal, NIST AI RMF, ISO 42001, ISO 27001, OWASP, SANS
2mo
Save
Mark Applied
Hide
Penetration Tester
Herndon, Virginia, United States
$130k-$145k/yr HybridFull Time
Dark Wolf Solutions
Dark Wolf Solutions: Provides cybersecurity and software development services to defense agencies.
2+ YOEBachelor’s degree in cybersecurity, information technology, computer engineering, or related field; 2+ years in multiple security domains; cloud proficiency (AWS, Azure, GCP); embedded/IoT testing; strong reporting; OWASP/web app testing; NIST 800-53 knowledge; US citizenship with active Secret clearance.
AWS, Azure, GCP, OWASP, NIST