224 web application security developer jobs at 164 companies in United States
2mo
Save
Mark Applied
Hide
Web Application Developer
McLean or United States
OnsiteFull Time
Experience developing modern web applications with JavaScript/TypeScript frameworks, Node.js, RESTful APIs, SQL databases (PostgreSQL/MySQL), containerization (Docker/Podman), AWS, Git, Agile, and strong security and problem-solving skills. US citizenship and active Top Secret clearance with Full Scope Polygraph required.
JavaScript, TypeScript, Angular, React, Vue, Node.js, Express, Koa, Hapi, HTML5, CSS3, ES6+, Sass, PostgreSQL, MySQL, Prisma, Sequelize, Docker, Podman, AWS, Git, ElasticSearch, Terraform, CloudFormation, leaflet.js, Jenkins, JEE, PKI
3w
Save
Mark Applied
Hide
Web Application Developer
Linthicum, Maryland, United States
$129k-$156k/yr OnsiteFull Time
7+ YOERequires active TS/SCI clearance with polygraph, 7 years of software engineering experience, a bachelor's in computer science or equivalent experience, IAM certification, and web development, Linux, API, database, and secure coding skills.
Amazon Web Services (AWS), PHP, .NET, C#, Java, Node.js, Python, HTML, CSS, JavaScript, Vue.js, React, Linux, Microsoft Azure, IAM, Amazon EC2, Application Load Balancer, Amazon S3, Amazon RDS, Amazon CloudWatch, Nginx, Apache, Tomcat, Microsoft PowerShell, CI/CD
2mo
Save
Mark Applied
Hide
Python Web Application Developer
Tysons Corner or Falls Church
$32-$45/hr HybridFull Time
5+ YOE5+ years Python development, Flask experience, web app deployment and security, authentication and certificate management, REST API and database integration, Git, strong debugging and communication skills.
Python, Flask, Microsoft Entra ID, HTML, CSS, JavaScript, REST APIs, OAuth, SSO, PostgreSQL, SQL Server, MySQL, Git, Azure, AWS, IIS, NGINX, Apache, Docker, Linux, Windows, CI/CD
2mo
Save
Mark Applied
Hide
Web Application Security Engineer (AppSec / DevSecOps)
Washington, District of Columbia, United States
HybridFull Time
Experience in application security, secure SDLC, vulnerability assessment, WAF, CI/CD/DevSecOps integration, and familiarity with federal frameworks (NIST, FedRAMP); Public Trust clearance or ability to obtain.
SAST, DAST, Software Composition Analysis (SCA), Web Application Firewall (WAF), CI/CD, DevSecOps, AWS, Microsoft Azure, OWASP Top 10, NIST, FedRAMP
2mo
Save
Mark Applied
Hide
Python Web Application Developer
Tysons Corner or Falls Church
HybridFull Time
5+ YOE5+ years Python development, Flask experience, web app deployment and security, authentication and certificate management, REST APIs, relational DBs, Git, HTML/CSS/JavaScript, strong debugging and communication skills.
Python, Flask, Microsoft Entra ID, HTML, CSS, JavaScript, REST APIs, PostgreSQL, SQL Server, MySQL, Git, Azure, AWS, IIS, NGINX, Apache, Docker, Linux, Windows, CI/CD
1mo
Save
Mark Applied
Hide
SME Web Application Developer — Data Visualization
McLean, Virginia, United States
OnsiteFull Time
15+ YOE15+ years web/software development, expert JavaScript and Vue.js, strong data visualization competency, ability to obtain/maintain security clearance, self-driven and able to mentor.
JavaScript, Vue.js, Microsoft SharePoint
1mo
Save
Mark Applied
Hide
Web Application Firewall Engineer
United States
$100k-$120k/yr RemoteFull Time
Experience in application/web security, secure SDLC, vulnerability assessment, WAF configuration, and integrating security into CI/CD/DevSecOps environments.
Barracuda WAF, OWASP Top 10, CI/CD, DevSecOps
2mo
Save
Mark Applied
Hide
Web Developer Security Engineer
Washington, District of Columbia, United States
HybridFull Time
3+ YOE3+ years in web application security or secure software development; hands-on experience with .NET, HTML5, CSS3, JavaScript, REST APIs, and SQL; DevSecOps automation, vulnerability remediation, OWASP Top 10 knowledge, and relevant security certifications.
.NET, HTML5, CSS3, JavaScript, REST APIs, SQL, OWASP Top 10, WAFs
2mo
Save
Mark Applied
Hide
Web Developer Security Engineer
Washington, District of Columbia, United States
HybridFull Time
3+ YOE3+ years in application security/SSDLC, strong OWASP knowledge, vulnerability lifecycle management, DevSecOps/CI-CD integration, WAF and FIM experience, Tier II security operations, relevant application/offensive/foundational security certification.
C#, ASP.NET MVC, WCF, HTML5, CSS3, JavaScript, React, TypeScript, REST APIs, SQL, Python, Node.js, Java, GitHub Copilot, WAF, File Integrity Monitoring (FIM), SIEM, IDS/IPS, NDR, EDR, AWS, Docker, Kubernetes
2w
Save
Mark Applied
Hide
Application Security Engineer
Rensselaer or Albany
$90k-$110k/yr OnsiteFull Time
8+ YOERequires 8+ years of IT experience, 3+ years in application security engineering, 5+ years in software development, Java/web development, secure coding, RHEL, JBoss, and application scanning.
Java, Fortify, SonarQube, RHEL, JBoss, CI/CD
2mo
Save
Mark Applied
Hide
Web Application Developer, Senior
Washington, District of Columbia, United States
$155k-$175k/yr OnsiteFull Time
8+ YOEActive TS/SCI clearance, Security+ CE (or ability within 90 days), Bachelor’s in CS or equivalent, 8–10 years experience, proficiency with React.js, Node.js, JavaScript, HTML, CSS, SQL, RESTful APIs, Git, and Linux (RHEL).
React.js, Node.js, JavaScript, HTML, CSS, SQL, RESTful API, Git, Linux (RHEL)
3h
Save
Mark Applied
Hide
Application Security Engineer
United States
$160k-$210k/yr RemoteFull Time
5+ YOERequires 5+ years in application or product security, web application security, AppSec automation, DevSecOps, container security, GitHub Actions, Python, and TypeScript/JavaScript. Security clearance is preferred.
SAST, SCA, DAST, GitHub Actions, Python, TypeScript, JavaScript, NIST Risk Management Framework
3w
Save
Mark Applied
Hide
Application Security Engineer
Tysons, Virginia, United States
$115k-$145k/yr HybridFull Time
2+ YOERequires 2+ years of Java development, application security testing, source-code review, web security, CI/CD, containers, cloud platforms, and strong technical communication; must be able to obtain security clearance.
Java, Java Spring Boot, Angular, REST APIs, SQL, PostgreSQL, JWT, OAuth, Entra, Keycloak, GitLab CI, Azure DevOps, GitHub Actions, Kubernetes, Trivy, Kubesec, Azure, AWS, GitLab Secrets Manager, AWS KMS, Azure Key Vault, Ansible Vault, SAST, DAST, SCA, Falco, NeuVector, Burp Suite, CI/CD, IaC
1mo
Save
Mark Applied
Hide
Senior Web Application Software Developer
Beltsville, Maryland, United States
OnsiteFull Time
6+ YOEBachelor's in CS/IS/Software Eng, 6+ years building enterprise web apps, 3–4 years with open-source tools, Azure migration experience, API and containerization skills, security and accessibility knowledge.
JavaScript, Angular, SQL Server, MySQL, PostgreSQL, Python, Entity Framework, GraphQL, RESTful API, Linux, Microsoft Azure, Git, GitHub, Docker, HTML, XHTML, CSS, U.S. Web Design System (USWDS)
1mo
Save
Mark Applied
Hide
Web Application Developer with Polygraph
Herndon, Virginia, United States
$121k-$266k/yr OnsiteFull Time
10+ YOEActive Top Secret/SCI with Polygraph, Bachelor's in Computer Science or related, 10+ years web development experience, Oracle SQL/PLSQL, ASP.NET, JavaScript/Angular/node.js/TypeScript, C#, MVC, SAML/OIDC, CI/CD, secure environment experience.
Oracle SQL, PL/SQL, ASP.NET, JavaScript, HTML, CSS, Angular, Angular Material UI components, node.js, TypeScript, C#, WCF, WebAPI, MVC, SAML, OIDC, CI/CD, HighVIEW, JIRA, Confluence
3w
Save
Mark Applied
Hide
Web Developer Security Engineer (DC, Washington)
Washington, District of Columbia, United States
$145k-$175k/yr OnsiteFull Time
5+ YOERequires 5+ years of secure software or application security engineering, 3+ years of web application security or SSDLC, a bachelor's degree or equivalent, and active Top Secret clearance.
OWASP Top 10, WAF, FIM, CI/CD, DevSecOps
2mo
Save
Mark Applied
Hide
Application Security Engineer
Washington, District of Columbia, United States
$180k-$200k/yr RemoteFull Time
4+ YOE4+ years in application security or secure development, strong cryptography and web security knowledge, experience with Node.js and Go, SAST/DAST/IAST/SCA tooling, vulnerability programs (bug bounty, pentest), and familiarity with cloud infra (GCP/AWS) and Kubernetes preferred.
Node.js, Go, Trusted Data Format (TDF), SAST, DAST, IAST, SCA, Burp, ZAP, Qualys, Nessus, GCP, AWS, Kubernetes, Slack, Zoom
3w
Save
Mark Applied
Hide
Web App Developer
Fort Gordon, Georgia, United States
OnsiteFull Time
3+ YOEActive Secret security clearance required, 3+ years web/app development experience, proficiency with front-end (HTML,CSS,JavaScript/TypeScript), back-end APIs, relational and non-relational databases, and secure coding practices; Bachelor’s degree preferred.
HTML, CSS, JavaScript, TypeScript, PostgreSQL, MySQL, Oracle, SQL, ORM, Docker, Kubernetes, AWS, Azure, Google Cloud, CI/CD, DevOps
1mo
Save
Mark Applied
Hide
Staff Application Security Engineer
United States
$114k-$240k/yr OnsiteFull Time
8+ YOE8+ years in application security or software development in cloud-native/SaaS environments; expertise in secure SDLC, CI/CD security, SAST/SCA/DAST, API and AI security; strong cloud and web technology knowledge.
Jenkins, ArgoCD, SAST, SCA, DAST, Model Context Protocol (MCP), LLM, Burp Suite Pro, Java, Java Spring Boot, JavaScript, Node.js, C#, AWS, GCP, Azure, Kubernetes, Wiz, NeMo Guardrails, AWS Bedrock Guardrails, DefectDojo, Wiz Code, Veracode, Checkmarx, Cycode, SonarQube, OWASP
6d
Save
Mark Applied
Hide
Application Security Engineer
Atlanta, Georgia, United States
HybridFull Time
Experience securing web applications, analyzing SAST/SCA/DAST findings, programming in listed languages, cloud security in AWS or Azure, and collaborating across teams. Permanent U.S. work authorization required.
React.js, Next.js, ASP.NET, .NET Framework, SAST, SCA, DAST, Python, PowerShell, C#, Java, CI/CD, ServiceNow, SQL, .NET, JavaScript, Go, AWS, Azure, IAM, OWASP, CIS, GHAS, Orca
Explore Jobs