81 dast jobs at 53 companies in Fredericksburg, VA

2mo
Save
Mark Applied
Hide
Lead Security Engineer
Suitland, Maryland, United States
OnsiteFull Time, Contract
B&A
B&A: Provides IT systems integration and data services to federal agencies.
15+ YOELead security engineer with 15+ years, DevSecOps, Zero Trust, SAST/DAST, ATO, CISSP, CCSP; US Citizenship required.
SIEM, SBOM, NIST SP 800-53, NIST Cybersecurity Framework, Zero Trust, SAST, DAST, DevSecOps, POA&M, ATO, Encryption, IAM, API security
1mo
Save
Mark Applied
Hide
Senior Manual Ethical Hacker
Denver or Washington or Seattle or Charlotte or Jacksonville or Jersey City or Chicago
$160k-$205k/yr OnsiteFull Time
Bank of America
Bank of AmericaNYSE: BAC: Provides banking, investment, and financial risk management services.
5+ YOE5+ years pentesting/application security experience, ability to perform manual web and mobile assessments, develop PoCs, conduct code reviews, use DAST/SAST, and strong programming/debugging and threat analysis skills.
DAST, SAST, Frida, UNIX, LINUX, TCP/IP, Web APIs, SBOM, CVE, CWE, Port Swigger, LLM security
1mo
Save
Mark Applied
Hide
Cybersecurity Software Engineer
Fairfax or Austin
$94k-$198k/yr HybridFull Time
CACI
CACINYSE: CACI: Provides information technology and professional services to government clients.
5+ YOEBachelor's degree, active TS/SCI, 5+ years cyber engineering (2+ with modern software), Kubernetes security, IaC/PaaS/DevSecOps experience, Ansible and scripting, SIEM/SAST/DAST/SCA familiarity, network protocol knowledge.
Kubernetes, SIEM, SAST, DAST, SCA, Ansible, SBOM, RBOM, TCP/IP, STIG, SRG, CIS, DevSecOps, IaC, PaaS, IAM, SDLC
2w
Save
Mark Applied
Hide
Application Security Senior Manager
Annapolis Junction or New York City or Annapolis or Washington
$125k-$233k/yr OnsiteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
10+ YOE5+ Mgmt10+ years in application development and software security,5+ years leading application security teams,experience with SDLC,threat modeling,DAST/SAST/IAST/SCA,CI/CD,AI scanning,knowledge of OWASP/NIST,Bachelor's degree.
DAST, SAST, IAST, SCA, CI/CD, Mythos, OWASP, NIST
1mo
Save
Mark Applied
Hide
DevSecOps Engineer
Washington or United States
$120k-$140k/yr RemoteFull Time
West 4th Strategy
West 4th Strategy: Provides technology and professional services to federal government agencies.
Experienced DevSecOps engineer to build and secure AWS cloud infrastructure, implement IaC, automate CI/CD with GitHub Actions, integrate SAST/DAST/SCA tooling, perform container scanning, and coach developers; U.S. citizenship and public trust eligibility required.
Veracode, Burp Suite, GitHub Actions, GitHub CI, Docker, Terraform, Ansible, AWS, Python, Java, EDGAR, GitHub Copilot, SAST, DAST, SCA, Infrastructure as Code (IaC)
3w
Save
Mark Applied
Hide
Senior Associate, Application Security, DevSecOps
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yr OnsiteFull Time
KPMG
KPMG: Global professional services network providing audit, tax, and advisory.
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
Java, C#, JavaScript, Python, SQL, CI/CD, SAST, DAST, Azure, OWASP
2mo
Save
Mark Applied
Hide
Application Security Engineer
Washington, District of Columbia, United States
$180k-$200k/yr RemoteFull Time
Virtru
Virtru: Provides data-centric encryption and privacy control software for organizations.
4+ YOE4+ years in application security or secure development, strong cryptography and web security knowledge, experience with Node.js and Go, SAST/DAST/IAST/SCA tooling, vulnerability programs (bug bounty, pentest), and familiarity with cloud infra (GCP/AWS) and Kubernetes preferred.
Node.js, Go, Trusted Data Format (TDF), SAST, DAST, IAST, SCA, Burp, ZAP, Qualys, Nessus, GCP, AWS, Kubernetes, Slack, Zoom
2w
Save
Mark Applied
Hide
Senior DevOps Engineer
Washington, District of Columbia, United States
OnsiteFull Time
Cooley
Cooley: Global law firm providing legal services to high-growth industries.
4+ YOE4+ years building and operating cloud infrastructure and CI/CD pipelines; strong Terraform (AWS, Azure), GitHub Actions, SAST/DAST, APM/Datadog, SOC 2 change management familiarity; proficiency with Microsoft Office and iManage; ability to work extended hours and travel as required.
Microsoft Office, iManage, Terraform, AWS, Azure, GitHub Actions, CI/CD, SAST, DAST, APM, Datadog, SIEM, SOC 2
2mo
Save
Mark Applied
Hide
Staff Application Security Engineer
Washington, District of Columbia, United States
$150k-$173k/yr OnsiteFull Time
The Nuclear Company
The Nuclear Company: Deploys standardized nuclear reactors for utility-scale energy generation.
4+ YOE4+ years in application/product/software security; experience with secure SDLC tooling (GitHub Advanced Security, CodeQL, Dependabot, SAST/SCA/DAST), familiarity with AWS security, ability to read code (Python, TypeScript, Go, Java, C#, C++), strong communication and offensive-security mindset.
GitHub, GitHub Advanced Security, CodeQL, Dependabot, SAST, SCA, DAST, Palantir Foundry, AWS, IAM, CI/CD, Python, TypeScript, Go, Java, C#, C++, OWASP ASVS, OWASP Top 10, OWASP API Security Top 10, NIST CSF, NIST 800-53, SOC 2, IEC 62443, NERC CIP
3w
Save
Mark Applied
Hide
Cybersecurity Engineer - Cloud
Chantilly or Beale AFB
HybridFull Time
SAIC
SAICNASDAQ: SAIC: Provides government and defense clients with technology and engineering services.
4+ YOEExperience securing multi-classification cloud environments, STIG/ACAS/Nessus/SAST/DAST validation, RMF/ATO artifact maintenance, Jira/Xacta familiarity, and DoD 8140-aligned certifications.
ACAS, Nessus, Jira, Xacta, Prometheus, Grafana, Terraform, Ansible, Helm, Argo CD
1mo
Save
Mark Applied
Hide
RN Case Manager, Transition of Care (TOC)
Prince George's County or Maryland or United States
$71k-$91k/yr FieldFull Time
Cityblock Health
Cityblock Health: Provides integrated medical, behavioral, and social healthcare services.
3+ YOE3+ years nursing experience; graduate of accredited nursing program (R.N.); performs post-discharge assessments, medication reconciliation, screening (PHQ-9, GAD-7, AUDIT, DAST-10), in-person and virtual visits, and documents care in EHR.
PHQ-9, GAD-7, AUDIT, DAST-10, Electronic Health Records (EHR)
1w
Save
Mark Applied
Hide
Senior DevOps / System Administrator
Sterling, Virginia, United States
$130k-$225k/yr OnsiteFull Time
GRVTY
GRVTY: Develops defense technology, cyber, and intelligence software solutions.
3+ YOE3+ years DevSecOps experience, 4+ years CI/CD pipeline development, experience with GitLab/Jenkins, SAST/DAST integration, Ansible/PowerShell, cloud/on-prem CI/CD, and DoD security controls; Top-Secret/SCI required.
GitLab, Git, Jenkins, Docker, Kubernetes, Terraform, Ansible, PowerShell, Bash, Python, Java, React
1mo
Save
Mark Applied
Hide
Security Engineer - Remote
Reston or United States
$99k-$168k/yr RemoteFull Time
ICF
ICFNASDAQ: ICFI: Provides strategic consulting and technology services to global organizations.
5+ YOEBachelor's degree, 5+ years security engineering experience, ability to obtain Public Trust, U.S. residency and 3 of last 5 years in U.S.; experience with NIST 800-53, DoD STIGs, SAST/DAST, cloud security (AWS/Azure/GCP), Linux and scripting (Python/Perl); preferred security certifications.
Nessus, Snyk, AWS GuardDuty, AWS Inspector, NIST 800-53, DoD STIGs, OWASP Top Ten, CWE Top 25, AWS, Azure, GCP, Linux, bash, sh, zsh, Python, Perl
1w
Save
Mark Applied
Hide
Application Security Engineer
Tysons, Virginia, United States
$115k-$145k/yr HybridFull Time
Veilant
Veilant: Protecting operations, personnel, and data from emerging surveillance threats.
2+ YOERequires 2+ years of Java development, application security testing, source-code review, web security, CI/CD, containers, cloud platforms, and strong technical communication; must be able to obtain security clearance.
Java, Java Spring Boot, Angular, REST APIs, SQL, PostgreSQL, JWT, OAuth, Entra, Keycloak, GitLab CI, Azure DevOps, GitHub Actions, Kubernetes, Trivy, Kubesec, Azure, AWS, GitLab Secrets Manager, AWS KMS, Azure Key Vault, Ansible Vault, SAST, DAST, SCA, Falco, NeuVector, Burp Suite, CI/CD, IaC
4d
Save
Mark Applied
Hide
Test Engineer
Dayton or Fairfax
RemoteFull Time
Concept Plus
Concept Plus: Delivers enterprise IT services for federal government agencies.
5+ YOEBachelor's degree in IT, engineering, computer science, or related field; 5–7 years of Agile software testing experience; CI/CD, DevSecOps, API testing, system integration, and automated testing experience required.
DevSecOps, CI/CD, Oracle, Java, Jenkins, GitLab CI, Azure DevOps, SAST, DAST, STIGs, RMF, Jira, Agile, API
2mo
Save
Mark Applied
Hide
Lead Security Engineer
McLean or Suitland
$160k-$180k/yr HybridFull Time
Revolutional
Revolutional: Delivers advanced technology and mission support to federal agencies.
15+ YOEU.S. citizen able to obtain Public Trust,15+ years cybersecurity experience, CISSP and CCSP required, strong cloud, DevSecOps, IAM, compliance (NIST/FedRAMP/FISMA), and security operations experience.
AWS, Azure, SIEM, SAST, DAST, Git, Jira, Confluence, ServiceNow
1mo
Save
Mark Applied
Hide
Cyber Technical Engineer
Arlington or Washington or Pentagon or Springfield or Chantilly or Tysons Corner
$70k-$115k/yr OnsiteFull Time
Technomics
Technomics: Provides cost analysis and decision support services for government.
1+ YOE1–3 years DevSecOps/Cybersecurity experience, knowledge of NIST RMF and ATO processes, containerization, CI/CD, scripting (Python/Bash), Linux administration, and security scanning integration; active Secret clearance required.
GitLab CI/CD, Docker, Podman, Kubernetes, Python, Bash, Nessus, eMASS, AWS, Azure, Terraform, Ansible, SCAP, OpenSCAP, ACAS, Jira, Confluence, Linux, SAST, SCA, DAST
1mo
Save
Mark Applied
Hide
Software Development Engineer II – CI/CD & Platform Automation (Mission-Focused)
Redlands or St. Louis or Vienna or Washington
$97k-$162k/yr OnsiteFull Time
Esri
Esri: Developing software for digital mapping and spatial data analysis.
2+ YOE2+ years DevOps/CI-CD experience; hands-on with GitHub Actions/GitLab CI/Azure Pipelines/Jenkins, Docker, Python/JavaScript, IaC (Ansible/AWS CDK/Terraform), cloud (AWS/Azure); US citizenship and active Top Secret/SCI clearance; Bachelor's in STEM.
GitHub Actions, GitLab CI, Microsoft Azure DevOps, Microsoft Azure Pipelines, Jenkins, YAML, Python, JavaScript, Docker, Conda, Rust, Ansible, AWS CDK, Terraform, SBOM, S3, Blob Storage, Kubernetes, SAST, DAST, ArcGIS API
4d
Save
Mark Applied
Hide
Infosec Analyst - Information Security
Plano or Raleigh or Reston or Richardson or Tempe
OnsiteFull Time
Infosys
InfosysNYSE: INFY: Provides IT consulting, software development, and business outsourcing services.
Bachelor's degree or equivalent experience; security tools, network protocols, encryption, secure development, DevSecOps, CI/CD, code review, threat modeling, and cloud security experience required.
SAST, DAST, SCA, GitHub, Jenkins, AWS, Microsoft Azure, GCP, Java, Python, JavaScript, C#
3w
Save
Mark Applied
Hide
Sr. DevSecOps Engineer II (6546)
Washington, District of Columbia, United States
$170k-$193k/yr OnsiteFull Time
MetroStar
MetroStar: Provides digital transformation and IT services to government agencies.
8+ YOEActive TS/SCI clearance,8+ years DevSecOps experience,IaC,containerization,CI/CD,hybrid cloud and VMware experience,security frameworks knowledge (RMF,NIST,STIGs),and scripting ability.
Terraform, CloudFormation, Ansible, Docker, Kubernetes, Jenkins, GitLab CI/CD, Azure DevOps, VMware, AWS, Azure, GCP, Python, Bash, PowerShell, RMF, NIST 800-53, STIGs, SAST, DAST, container scanning, secrets management