107 dast jobs at 67 companies in Laurel, MD
2mo
Save
Mark Applied
Hide
Lead Security Engineer
Suitland, Maryland, United States
OnsiteFull Time, Contract
15+ YOELead security engineer with 15+ years, DevSecOps, Zero Trust, SAST/DAST, ATO, CISSP, CCSP; US Citizenship required.
SIEM, SBOM, NIST SP 800-53, NIST Cybersecurity Framework, Zero Trust, SAST, DAST, DevSecOps, POA&M, ATO, Encryption, IAM, API security
1mo
Save
Mark Applied
Hide
DevSecOps Engineer
Washington D.C. or Sarasota or Miami or New York City or Toronto
$165k-$195k/yr OnsiteFull Time
Experience designing and operating an SSDLC, hands-on CI/CD hardening, SAST/DAST/SCA/container scanning, code review in Python/Go/TypeScript, Docker/Kubernetes, secrets management, and audit readiness.
OpenStack, Ceph, Python, Go, TypeScript, React, GitHub Actions, GitLab CI, Jenkins, SAST, DAST, SCA, container scanning, SBOM, Sigstore/cosign, SLSA, Vault, OAuth2, OpenID Connect, Docker, Kubernetes, STRIDE, PASTA, Terraform, Ansible, Rocky Linux, Ubuntu, OWASP Top 10, ISO 27001, SOC 2, PCI DSS, FedRAMP
2w
Save
Mark Applied
Hide
Security Analyst/Sr. Security Analyst (Application Security)-ITDSGGR (Contractual)
Washington, District of Columbia, United States
OnsiteFull Time
4+ YOE4+ years application security and vulnerability management experience (or 10+ with a bachelor), knowledge of OWASP/NIST/ISO frameworks, hands-on SAST/DAST/SCA, scripting (Java, Python, .NET, PowerShell), and stakeholder communication.
ServiceNow, Microsoft Azure, Microsoft Azure DevOps, Microsoft Power BI, Burp Suite, Sonatype Nexus Lifecycle, Checkmarx, Fortify, HCL AppScan, Veracode, Java, Python, .NET, PowerShell, SAST, DAST, SCA
2w
Save
Mark Applied
Hide
Sr. Manager, Application Security
Bethesda or United States
$110k-$190k/yr HybridFull Time
7+ YOE4+ Mgmt7+ years IT/security experience with 4+ years security leadership, bachelor\u0002s degree or equivalent, experience with AppSec testing (SAST/DAST/IAST), SCA, release management, and GitHub/JIRA/ServiceNow/Jenkins/Harness.
GitHub, JIRA, ServiceNow, Jenkins, Harness, SAST, DAST, IAST, SCA, OWASP, MITRE CVE/CWE
3w
Save
Mark Applied
Hide
Senior Manual Ethical Hacker
Denver or Washington or Seattle or Charlotte or Jacksonville or Jersey City or Chicago
$160k-$205k/yr OnsiteFull Time
5+ YOE5+ years pentesting/application security experience, ability to perform manual web and mobile assessments, develop PoCs, conduct code reviews, use DAST/SAST, and strong programming/debugging and threat analysis skills.
DAST, SAST, Frida, UNIX, LINUX, TCP/IP, Web APIs, SBOM, CVE, CWE, Port Swigger, LLM security
2mo
Save
Mark Applied
Hide
Security Software Engineer (MD, Hanover)
Hanover, Maryland, United States
OnsiteFull Time
3+ YOEBachelor's or equivalent experience, 3+ years software engineering with security focus; proficiency in JavaScript/TypeScript, Python, Go, or C#; experience with SAST/DAST, secure coding, NIST/CMMC/FedRAMP, and AWS/Azure security services.
JavaScript, TypeScript, Python, Go, C#, CI/CD, SAST, DAST, OWASP Top 10, DoD STIGs, IAM, Cognito, Microsoft Azure AD, SSO, SAML, OIDC, Security Hub, Microsoft Defender, Microsoft Sentinel, WAF, IaC, Docker, ECS, Prisma, Checkov, Snyk, Aqua, AWS, AWS GovCloud (US), Azure GCC High
1w
Save
Mark Applied
Hide
Application Security Senior Manager
Annapolis Junction, Maryland, United States
$125k-$233k/yr RemoteFull Time
10+ YOE5+ Mgmt10+ years in application development and software security,5+ years leading technical teams,experience across SDLC,DAST/SAST/IAST/SCA,CI/CD and AI scanning (Mythos),knowledge of OWASP/NIST,Bachelor's degree.
DAST, SAST, IAST, SCA, CI/CD, Mythos, OWASP, NIST, Frontier AI
1mo
Save
Mark Applied
Hide
Cybersecurity Software Engineer
Fairfax or Austin
$94k-$198k/yr HybridFull Time
5+ YOEBachelor's degree, active TS/SCI, 5+ years cyber engineering (2+ with modern software), Kubernetes security, IaC/PaaS/DevSecOps experience, Ansible and scripting, SIEM/SAST/DAST/SCA familiarity, network protocol knowledge.
Kubernetes, SIEM, SAST, DAST, SCA, Ansible, SBOM, RBOM, TCP/IP, STIG, SRG, CIS, DevSecOps, IaC, PaaS, IAM, SDLC
1mo
Save
Mark Applied
Hide
DevSecOps Engineer
Washington, D.C. or Sarasota or Miami or New York City or Toronto or Longboat Key
$165k-$195k/yr OnsiteFull Time
Experienced in DevSecOps/application or product security, SSDLC design and operation, CI/CD hardening, SAST/DAST/SCA and container scanning, Python/Go/TypeScript code review, Docker/Kubernetes, Vault, and secure supply chain practices.
OpenStack, Ceph, Python, Go, TypeScript, GitHub Actions, GitLab CI, Jenkins, SAST, DAST, SCA, secret scanning, container scanning, SBOM, Sigstore/cosign, SLSA, Docker, Kubernetes, Vault, OAuth2, OpenID Connect, Terraform, Ansible, STRIDE, PASTA, Rocky Linux, Ubuntu, OWASP Top 10
1w
Save
Mark Applied
Hide
Application Security Senior Manager
Annapolis Junction or New York City or Annapolis or Washington
$125k-$233k/yr OnsiteFull Time
10+ YOE5+ Mgmt10+ years in application development and software security,5+ years leading application security teams,experience with SDLC,threat modeling,DAST/SAST/IAST/SCA,CI/CD,AI scanning,knowledge of OWASP/NIST,Bachelor's degree.
DAST, SAST, IAST, SCA, CI/CD, Mythos, OWASP, NIST
1w
Save
Mark Applied
Hide
Cybersecurity Engineer Senior
Fairfax, Virginia, United States
$125k-$150k/yr RemoteFull Time
ASM ResearchNYSE: ACN: Provides IT and healthcare services to government agencies.
7+ YOEBachelor's or equivalent,7+ years cybersecurity engineering experience,expertise with NIST SP 800-53 and RMF,CI/CD security, SAST/DAST,SIEM,Zero Trust,incident response;U.S. citizenship and ability to obtain Secret clearance required.
NIST SP 800-53, Risk Management Framework (RMF), SAST, DAST, CI/CD, SIEM, AWS, Azure, Zero Trust
1w
Save
Mark Applied
Hide
Cybersecurity Engineer - Cloud
Chantilly, Virginia, United States
$160k-$200k/yr OnsiteFull Time
4+ YOESecure multi‑tenant classified cloud environments, implement JSIG/NIST/STIG baselines, produce RMF/ATO artifacts (SSP, POA&M), validate ACAS/Nessus and SAST/DAST outputs, and secure IaC deployments (Terraform/Ansible/Helm).
JSIG, NIST SP 800-53, STIG, Prometheus, Grafana, Terraform, Ansible, Helm, Argo CD, ACAS, Nessus, SAST, DAST, Jira, Xacta, RMF
2w
Save
Mark Applied
Hide
Security Analyst/Sr. Security Analyst (Application Security)-ITDSGGR (Contractual)
Washington, District of Columbia, United States
OnsiteFull Time
4+ YOEAdvanced degree in computer science/cybersecurity plus 4 years (or bachelor's plus 10 years). Experience in application security, vulnerability management, secure SDLC, OWASP/NIST/ISO frameworks, SAST/DAST/SCA, and programming (Java, Python, .NET, PowerShell).
OWASP Top 10, NIST SSDF, NIST CSF, ISO 27001, Java, Python, .NET, PowerShell, SAST, DAST, SCA, ServiceNow, Microsoft Azure, Azure DevOps, Power BI, Burp Suite, Sonatype Nexus Lifecycle, Checkmarx, Fortify, HCL AppScan, Veracode
1w
Save
Mark Applied
Hide
Senior DevSecOps & Systems Engineer (Full Stack)
Sterling, Virginia, United States
HybridFull Time
7+ YOEExpertise in SecDevOps, CI/CD security (SAST/DAST/SCA), scripting (Python/Bash/PowerShell), full-stack development, cloud (AWS/Azure/GCP), systems engineering, Linux/Windows server, and security hardening; ability to lead projects and mentor others.
Jenkins, GitLab CI, Git, Ansible, Docker, Kubernetes, SAST, DAST, SCA, Python, Bash, PowerShell, React, Angular, Vue, Node.js, TypeScript, Java, .NET, AWS, Azure, Google Cloud, IAM, DISA STIGs, CIS Benchmarks, Terraform, CloudFormation, OPA, Sentinel, DOORS, Jama, Prometheus, Grafana, ELK, Splunk
2w
Save
Mark Applied
Hide
Senior Associate, Application Security, DevSecOps
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yr OnsiteFull Time
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
Java, C#, JavaScript, Python, SQL, CI/CD, SAST, DAST, Azure, OWASP
1mo
Save
Mark Applied
Hide
DevSecOps Engineer
Washington or United States
$120k-$140k/yr RemoteFull Time
Experienced DevSecOps engineer to build and secure AWS cloud infrastructure, implement IaC, automate CI/CD with GitHub Actions, integrate SAST/DAST/SCA tooling, perform container scanning, and coach developers; U.S. citizenship and public trust eligibility required.
Veracode, Burp Suite, GitHub Actions, GitHub CI, Docker, Terraform, Ansible, AWS, Python, Java, EDGAR, GitHub Copilot, SAST, DAST, SCA, Infrastructure as Code (IaC)
1mo
Save
Mark Applied
Hide
Application Security Engineer
Washington, District of Columbia, United States
$180k-$200k/yr RemoteFull Time
4+ YOE4+ years in application security or secure development, strong cryptography and web security knowledge, experience with Node.js and Go, SAST/DAST/IAST/SCA tooling, vulnerability programs (bug bounty, pentest), and familiarity with cloud infra (GCP/AWS) and Kubernetes preferred.
Node.js, Go, Trusted Data Format (TDF), SAST, DAST, IAST, SCA, Burp, ZAP, Qualys, Nessus, GCP, AWS, Kubernetes, Slack, Zoom
1w
Save
Mark Applied
Hide
Senior DevOps Engineer
Washington, District of Columbia, United States
OnsiteFull Time
4+ YOE4+ years building and operating cloud infrastructure and CI/CD pipelines; strong Terraform (AWS, Azure), GitHub Actions, SAST/DAST, APM/Datadog, SOC 2 change management familiarity; proficiency with Microsoft Office and iManage; ability to work extended hours and travel as required.
Microsoft Office, iManage, Terraform, AWS, Azure, GitHub Actions, CI/CD, SAST, DAST, APM, Datadog, SIEM, SOC 2
1mo
Save
Mark Applied
Hide
Staff Application Security Engineer
Washington, District of Columbia, United States
$150k-$173k/yr OnsiteFull Time
4+ YOE4+ years in application/product/software security; experience with secure SDLC tooling (GitHub Advanced Security, CodeQL, Dependabot, SAST/SCA/DAST), familiarity with AWS security, ability to read code (Python, TypeScript, Go, Java, C#, C++), strong communication and offensive-security mindset.
GitHub, GitHub Advanced Security, CodeQL, Dependabot, SAST, SCA, DAST, Palantir Foundry, AWS, IAM, CI/CD, Python, TypeScript, Go, Java, C#, C++, OWASP ASVS, OWASP Top 10, OWASP API Security Top 10, NIST CSF, NIST 800-53, SOC 2, IEC 62443, NERC CIP
1w
Save
Mark Applied
Hide
Application Security Engineer — Secure Mission Systems
United States or Laurel
RemoteFull Time
6+ YOE6+ years in SAST/DAST and vulnerability remediation, bachelor’s in cybersecurity, experience with application-security testing, secure SDLC, and working with development teams to remediate findings.
Fortify, X-Ray, OWASP ZAP, GitLab, Artifactory, OpenShift, Kubernetes, WebAssembly (WASM)