Eccalon: High-tech cybersecurity and AI solutions for government and industry.
3+ YOE3+ years software engineering with security focus, proficiency in one or more languages (JavaScript/TypeScript, Python, Go, C#), secure coding, SAST/DAST, familiarity with NIST/CMMC/FedRAMP and AWS/Azure security.
Marriott InternationalNASDAQ: MAR: Operates and franchises a global network of hotels and resorts.
7+ YOE4+ Mgmt7+ years IT/security experience with 4+ years security leadership, bachelor\u0002s degree or equivalent, experience with AppSec testing (SAST/DAST/IAST), SCA, release management, and GitHub/JIRA/ServiceNow/Jenkins/Harness.
Denver or Washington or Seattle or Charlotte or Jacksonville or Jersey City or Chicago
$160k-$205k/yrOnsiteFull Time
Bank of AmericaNYSE: BAC: Provides banking, investment, and financial risk management services.
5+ YOE5+ years pentesting/application security experience, ability to perform manual web and mobile assessments, develop PoCs, conduct code reviews, use DAST/SAST, and strong programming/debugging and threat analysis skills.
DAST, SAST, Frida, UNIX, LINUX, TCP/IP, Web APIs, SBOM, CVE, CWE, Port Swigger, LLM security
Booz Allen HamiltonNYSE: BAH: Consulting and technology services for government and commercial clients
10+ YOE5+ Mgmt10+ years in application development and software security,5+ years leading technical teams,experience across SDLC,DAST/SAST/IAST/SCA,CI/CD and AI scanning (Mythos),knowledge of OWASP/NIST,Bachelor's degree.
DAST, SAST, IAST, SCA, CI/CD, Mythos, OWASP, NIST, Frontier AI
CACINYSE: CACI: Provides information technology and professional services to government clients.
5+ YOEBachelor's degree, active TS/SCI, 5+ years cyber engineering (2+ with modern software), Kubernetes security, IaC/PaaS/DevSecOps experience, Ansible and scripting, SIEM/SAST/DAST/SCA familiarity, network protocol knowledge.
Annapolis Junction or New York City or Annapolis or Washington
$125k-$233k/yrOnsiteFull Time
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
10+ YOE5+ Mgmt10+ years in application development and software security,5+ years leading application security teams,experience with SDLC,threat modeling,DAST/SAST/IAST/SCA,CI/CD,AI scanning,knowledge of OWASP/NIST,Bachelor's degree.
West 4th Strategy: Provides technology and professional services to federal government agencies.
Experienced DevSecOps engineer to build and secure AWS cloud infrastructure, implement IaC, automate CI/CD with GitHub Actions, integrate SAST/DAST/SCA tooling, perform container scanning, and coach developers; U.S. citizenship and public trust eligibility required.
Virtru: Provides data-centric encryption and privacy control software for organizations.
4+ YOE4+ years in application security or secure development, strong cryptography and web security knowledge, experience with Node.js and Go, SAST/DAST/IAST/SCA tooling, vulnerability programs (bug bounty, pentest), and familiarity with cloud infra (GCP/AWS) and Kubernetes preferred.
Node.js, Go, Trusted Data Format (TDF), SAST, DAST, IAST, SCA, Burp, ZAP, Qualys, Nessus, GCP, AWS, Kubernetes, Slack, Zoom
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yrOnsiteFull Time
KPMG: Global professional services network providing audit, tax, and advisory.
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
Cooley: Global law firm providing legal services to high-growth industries.
4+ YOE4+ years building and operating cloud infrastructure and CI/CD pipelines; strong Terraform (AWS, Azure), GitHub Actions, SAST/DAST, APM/Datadog, SOC 2 change management familiarity; proficiency with Microsoft Office and iManage; ability to work extended hours and travel as required.
Application Security Engineer — Secure Mission Systems
United States or Laurel
RemoteFull Time
Rackner: Builds cloud-native software and AI systems for government agencies.
6+ YOE6+ years in SAST/DAST and vulnerability remediation, bachelor’s in cybersecurity, experience with application-security testing, secure SDLC, and working with development teams to remediate findings.
Prince George's County or Maryland or United States
$71k-$91k/yrFieldFull Time
Cityblock Health: Provides integrated medical, behavioral, and social healthcare services.
3+ YOE3+ years nursing experience; graduate of accredited nursing program (R.N.); performs post-discharge assessments, medication reconciliation, screening (PHQ-9, GAD-7, AUDIT, DAST-10), in-person and virtual visits, and documents care in EHR.
PHQ-9, GAD-7, AUDIT, DAST-10, Electronic Health Records (EHR)
GRVTY: Develops defense technology, cyber, and intelligence software solutions.
3+ YOE3+ years DevSecOps experience, 4+ years CI/CD pipeline development, experience with GitLab/Jenkins, SAST/DAST integration, Ansible/PowerShell, cloud/on-prem CI/CD, and DoD security controls; Top-Secret/SCI required.
ICFNASDAQ: ICFI: Provides strategic consulting and technology services to global organizations.
5+ YOEBachelor's degree, 5+ years security engineering experience, ability to obtain Public Trust, U.S. residency and 3 of last 5 years in U.S.; experience with NIST 800-53, DoD STIGs, SAST/DAST, cloud security (AWS/Azure/GCP), Linux and scripting (Python/Perl); preferred security certifications.
Nessus, Snyk, AWS GuardDuty, AWS Inspector, NIST 800-53, DoD STIGs, OWASP Top Ten, CWE Top 25, AWS, Azure, GCP, Linux, bash, sh, zsh, Python, Perl
GAMA-1 Technologies: Provides IT, cloud, and security services to federal agencies.
8+ YOE8+ years in DevOps/Systems Engineering, experience with cloud-native technologies, CI/CD, GitLab, Terraform, Docker/Kubernetes, AWS services, scripting (Bash/Python), and ability to obtain a security clearance.
Mobile Architect _ Digital Banking & Secure Mobile
McLean, Virginia, United States
$160k-$190k/yrOnsiteFull Time
Tata Consultancy ServicesNational Stock Exchange of India: TCS: Global provider of IT services, consulting, and business solutions.
8+ YOERequires a bachelor's degree in computer science and 8–10 years of experience designing secure mobile architectures, with expertise in Ionic Framework, Cordova, Angular, mobile security, APIs, and enterprise integration.