66 dast jobs at 42 companies in Virginia

1mo
Save
Mark Applied
Hide
Cybersecurity Software Engineer
Fairfax or Austin
$94k-$198k/yr HybridFull Time
CACI
CACINYSE: CACI: Provides information technology and professional services to government clients.
5+ YOEBachelor's degree, active TS/SCI, 5+ years cyber engineering (2+ with modern software), Kubernetes security, IaC/PaaS/DevSecOps experience, Ansible and scripting, SIEM/SAST/DAST/SCA familiarity, network protocol knowledge.
Kubernetes, SIEM, SAST, DAST, SCA, Ansible, SBOM, RBOM, TCP/IP, STIG, SRG, CIS, DevSecOps, IaC, PaaS, IAM, SDLC
3w
Save
Mark Applied
Hide
Senior Associate, Application Security, DevSecOps
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yr OnsiteFull Time
KPMG
KPMG: Global professional services network providing audit, tax, and advisory.
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
Java, C#, JavaScript, Python, SQL, CI/CD, SAST, DAST, Azure, OWASP
3w
Save
Mark Applied
Hide
Cybersecurity Engineer - Cloud
Chantilly or Beale AFB
HybridFull Time
SAIC
SAICNASDAQ: SAIC: Provides government and defense clients with technology and engineering services.
4+ YOEExperience securing multi-classification cloud environments, STIG/ACAS/Nessus/SAST/DAST validation, RMF/ATO artifact maintenance, Jira/Xacta familiarity, and DoD 8140-aligned certifications.
ACAS, Nessus, Jira, Xacta, Prometheus, Grafana, Terraform, Ansible, Helm, Argo CD
1w
Save
Mark Applied
Hide
Senior DevOps / System Administrator
Sterling, Virginia, United States
$130k-$225k/yr OnsiteFull Time
GRVTY
GRVTY: Develops defense technology, cyber, and intelligence software solutions.
3+ YOE3+ years DevSecOps experience, 4+ years CI/CD pipeline development, experience with GitLab/Jenkins, SAST/DAST integration, Ansible/PowerShell, cloud/on-prem CI/CD, and DoD security controls; Top-Secret/SCI required.
GitLab, Git, Jenkins, Docker, Kubernetes, Terraform, Ansible, PowerShell, Bash, Python, Java, React
1mo
Save
Mark Applied
Hide
Senior DevOps Engineer
Boston or Arizona or California or Colorado or Connecticut or Florida or Georgia or Illinois or Indiana or Kansas or Maryland or Massachusetts or Michigan or Nebraska or New Hampshire or New Jersey or New York or North Carolina or Pennsylvania or Rhode Island or South Carolina or Tennessee or Texas or Virginia or Wisconsin
RemoteFull Time
Foley: Compliance and hiring software for safety-sensitive fleet operations.
5+ YOE5+ years in DevOps/SRE/Platform roles, strong AWS and IaC (Terraform/AWS CDK) experience, GitHub Enterprise/GitHub Actions and Azure DevOps pipeline expertise, CI/CD, DevSecOps, SAST/DAST integration, strong communication and troubleshooting skills.
Azure DevOps, GitHub Enterprise, GitHub Actions, Terraform, AWS CDK, AWS, Datadog, GitHub Advanced Security, Snyk, Semgrep, OWASP ZAP, .NET, C#
2w
Save
Mark Applied
Hide
Engineer II, Cybersecurity , Application Security
Richmond, Virginia, United States
$81k-$121k/yr HybridFull Time
CarMax
CarMaxNYSE: KMX: Operates a national network of used vehicle retail stores.
2+ YOE2+ years cybersecurity experience, Bachelor’s in CS/Engineering/Cybersecurity or equivalent, coding/scripting (PowerShell, Python, .Net, Javascript, C#), EM/tool experience (GitHub, Azure DevOps, TeamCity), cloud (Azure/AWS/GCP), DAST/SAST/container security experience preferred, CISSP preferred.
PowerShell, Python, .Net, Javascript, C#, GitHub, Azure DevOps, TeamCity, Azure, AWS, GCP, Kubernetes
1mo
Save
Mark Applied
Hide
Security Engineer - Remote
Reston or United States
$99k-$168k/yr RemoteFull Time
ICF
ICFNASDAQ: ICFI: Provides strategic consulting and technology services to global organizations.
5+ YOEBachelor's degree, 5+ years security engineering experience, ability to obtain Public Trust, U.S. residency and 3 of last 5 years in U.S.; experience with NIST 800-53, DoD STIGs, SAST/DAST, cloud security (AWS/Azure/GCP), Linux and scripting (Python/Perl); preferred security certifications.
Nessus, Snyk, AWS GuardDuty, AWS Inspector, NIST 800-53, DoD STIGs, OWASP Top Ten, CWE Top 25, AWS, Azure, GCP, Linux, bash, sh, zsh, Python, Perl
1w
Save
Mark Applied
Hide
Mobile Architect _ Digital Banking & Secure Mobile
McLean, Virginia, United States
$160k-$190k/yr OnsiteFull Time
Tata Consultancy Services
Tata Consultancy ServicesNational Stock Exchange of India: TCS: Global provider of IT services, consulting, and business solutions.
8+ YOERequires a bachelor's degree in computer science and 8–10 years of experience designing secure mobile architectures, with expertise in Ionic Framework, Cordova, Angular, mobile security, APIs, and enterprise integration.
Ionic Framework, Cordova, Angular, OWASP Mobile Top 10, OAuth 2.0, OpenID Connect, SAML, JWT, Face ID, Touch ID, iOS Keychain, Android Keystore, SSL/TLS, SAST, DAST, CI/CD, DevSecOps, RESTful, Salesforce, MuleSoft, IAM, PCI DSS, FFIEC, SOC2, GDPR
1mo
Save
Mark Applied
Hide
Mobile Architect
Alabama or Arkansas or Arizona or California or Colorado or Connecticut or Delaware or Florida or Georgia or Illinois or Indiana or Kentucky or Louisiana or Maryland or Michigan or Minnesota or Missouri or North Carolina or New Hampshire or New Jersey or New York or Ohio or Oregon or Pennsylvania or South Carolina or Tennessee or Texas or Utah or Virginia or Vermont or Washington
RemoteFull Time
ServiceTrade
ServiceTrade: Software platform for commercial mechanical and fire contractors.
7+ YOE3+ Mgmt7+ years mobile development with 3+ years architect/lead experience, deep native iOS (Swift) and Android (Kotlin) expertise, offline-first and sync experience, CI/CD and security knowledge, leadership and mentorship skills.
Kotlin, Swift, GitHub Actions, Fastlane, Kibana, Crashlytics, Pendo, Combine, Rx, Kotlin Coroutines, REST APIs, Stripe, .NET MAUI, React Native, Flutter, Google Firebase, Remote Config, Crashlytics (Firebase), OWASP MASVS, Cobalt, SAST, DAST
1w
Save
Mark Applied
Hide
Application Security Engineer
Tysons, Virginia, United States
$115k-$145k/yr HybridFull Time
Veilant
Veilant: Protecting operations, personnel, and data from emerging surveillance threats.
2+ YOERequires 2+ years of Java development, application security testing, source-code review, web security, CI/CD, containers, cloud platforms, and strong technical communication; must be able to obtain security clearance.
Java, Java Spring Boot, Angular, REST APIs, SQL, PostgreSQL, JWT, OAuth, Entra, Keycloak, GitLab CI, Azure DevOps, GitHub Actions, Kubernetes, Trivy, Kubesec, Azure, AWS, GitLab Secrets Manager, AWS KMS, Azure Key Vault, Ansible Vault, SAST, DAST, SCA, Falco, NeuVector, Burp Suite, CI/CD, IaC
4d
Save
Mark Applied
Hide
Test Engineer
Dayton or Fairfax
RemoteFull Time
Concept Plus
Concept Plus: Delivers enterprise IT services for federal government agencies.
5+ YOEBachelor's degree in IT, engineering, computer science, or related field; 5–7 years of Agile software testing experience; CI/CD, DevSecOps, API testing, system integration, and automated testing experience required.
DevSecOps, CI/CD, Oracle, Java, Jenkins, GitLab CI, Azure DevOps, SAST, DAST, STIGs, RMF, Jira, Agile, API
3mo
Save
Mark Applied
Hide
Application Security Engineer 3
Arlington, Virginia, United States
OnsiteFull Time
Bloomberg Industry Group
Bloomberg Industry Group: Provides legal, tax, and government intelligence and news services.
5+ YOELead application security engineering, design scalable security architectures, perform risk assessments, integrate security across the SDLC, and drive automation.
Python, Java, JavaScript, SAST, DAST, SCA, IaC, Container, Cloud Security, Kubernetes, DevSecOps
1mo
Save
Mark Applied
Hide
Software Development Engineer II – CI/CD & Platform Automation (Mission-Focused)
Redlands or St. Louis or Vienna or Washington
$97k-$162k/yr OnsiteFull Time
Esri
Esri: Developing software for digital mapping and spatial data analysis.
2+ YOE2+ years DevOps/CI-CD experience; hands-on with GitHub Actions/GitLab CI/Azure Pipelines/Jenkins, Docker, Python/JavaScript, IaC (Ansible/AWS CDK/Terraform), cloud (AWS/Azure); US citizenship and active Top Secret/SCI clearance; Bachelor's in STEM.
GitHub Actions, GitLab CI, Microsoft Azure DevOps, Microsoft Azure Pipelines, Jenkins, YAML, Python, JavaScript, Docker, Conda, Rust, Ansible, AWS CDK, Terraform, SBOM, S3, Blob Storage, Kubernetes, SAST, DAST, ArcGIS API
1mo
Save
Mark Applied
Hide
Technology Consultant 2
Plano or Richardson or Raleigh or Reston or Tempe or Arizona or North Carolina or Texas or Virginia or United States
OnsiteFull Time
Infosys
InfosysNYSE: INFY: Provides IT consulting, software development, and business outsourcing services.
Bachelor's degree or equivalent (or progressive experience in lieu), experience with CI/CD, AWS, Python/Bash, Docker/Kubernetes, Terraform, and Git; strong communication and SDLC experience; US work authorization required; relocation/travel possible.
CI/CD, GitLab, Jenkins, GitHub, UCD, AWS, Python, Bash, Docker, Kubernetes, Terraform, Git, Otel, DAST, SAS
2w
Save
Mark Applied
Hide
Senior Engineer, Application Security
Tysons Corner, Virginia, United States
$120k-$160k/yr HybridFull Time
Cvent
Cvent: Cloud-based software for event and venue management.
5+ YOE5+ years in application security or secure software development; strong scripting in Python, JavaScript/TypeScript, or Bash; CI/CD and SDLC security integration; cloud (AWS preferred) and tool familiarity; end-to-end ownership experience.
Python, JavaScript, TypeScript, Bash, AWS, GCP, Azure, AWS CDK, Burp Suite, Checkmarx, Mend, Veracode, Fortify, ZAP, Wiz, CI/CD, SAST, DAST, SCA
2mo
Save
Mark Applied
Hide
Senior DevSecOps Functional Analyst
Chantilly, Virginia, United States
$117k-$243k/yr HybridFull Time
Accenture Federal Services
Accenture Federal ServicesNYSE: ACN: Provides technology and consulting services to U.S. federal agencies.
5+ YOEBachelor’s or Master’s in Computer Science/Engineering; 5+ years in DevSecOps/functional analysis; experience with CI/CD, security testing, IaC, containers; multi-cloud; strong Jira backlog management; TS clearance required.
GitHub, Jenkins, Terraform, Ansible, Kubernetes, Docker, CloudFormation, GitLab, SAST, DAST, SCA, Jira, CI/CD, Web Security
1mo
Save
Mark Applied
Hide
Application Security Engineer - Mid-Atlantic region (Remote in VA, MD, PA, NC, DE, NJ, or DC)
Virginia or Maryland or Pennsylvania or North Carolina or Delaware or New Jersey or District of Columbia or United States
RemoteFull Time
GuidePoint Security
GuidePoint Security: Provides cybersecurity consulting, managed services, and integrated technology solutions.
5+ YOE5+ years security engineering experience, proficiency with SAST tools, CI/CD integration, software engineering background, scripting/automation skills, application security fundamentals (OWASP Top 10, threat modeling), strong communication.
Semgrep, Snyk, CodeQL, Checkmarx, Veracode, GitHub Actions, GitLab Runners, Azure DevOps, Jenkins, CircleCI, IAST, DAST, SCA, NoName, Traceable, Salt, Cequence, Burp Suite, OWASP Top 10, Greenhouse Software, Zoom Scheduler
1mo
Save
Mark Applied
Hide
Cloud Pipeline Deployment Engineer (Expert)
Herndon, Virginia, United States
$150k-$254k/yr OnsiteFull Time
BAE Systems
BAE SystemsLondon Stock Exchange: BA: Provides advanced defense, aerospace, and security technology solutions.
11+ YOEBachelor's degree with 11 years' relevant experience (or equivalent), Top Secret/SCI polygraph clearance, strong Azure DevOps and CI/CD experience, IaC (ARM/Bicep/Terraform), Docker/AKS, Git, and scripting (PowerShell/Bash/Python).
Microsoft Azure DevOps Services, YAML, Git, ARM, Bicep, Terraform, Docker, Microsoft Azure Kubernetes Service (AKS), Microsoft App Services, Microsoft Key Vault, Microsoft Azure Storage, Microsoft Azure Monitor, SAST, DAST, PowerShell, Bash, Python
1w
Save
Mark Applied
Hide
Junior DevSecOps Engineer
Reston, Virginia, United States
$80k-$90k/yr HybridFull Time
Inadev
Inadev: Provides digital engineering and AI solutions to government and businesses.
3+ YOERequires 3+ years of DevOps/DevSecOps experience, AWS and infrastructure-as-code expertise, CI/CD and security automation experience, and Python or Bash scripting. U.S. citizenship and government clearance eligibility required.
AWS, CodePipeline, CodeBuild, AWS CDK, CloudFormation, Python, Bash, SAST, DAST, SCA, FedRAMP, NIST
4d
Save
Mark Applied
Hide
Infosec Analyst - Information Security
Plano or Raleigh or Reston or Richardson or Tempe
OnsiteFull Time
Infosys
InfosysNYSE: INFY: Provides IT consulting, software development, and business outsourcing services.
Bachelor's degree or equivalent experience; security tools, network protocols, encryption, secure development, DevSecOps, CI/CD, code review, threat modeling, and cloud security experience required.
SAST, DAST, SCA, GitHub, Jenkins, AWS, Microsoft Azure, GCP, Java, Python, JavaScript, C#