> Markdown version of [/jobs/ext/2694602-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/2694602-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security Engineer

- **Company:** Ascii Group, LLC
- **Location:** McLean, VA, United States
- **Experience:** Expert
- **Salary:** $145,600.0
- **Contract:** Temporary contract
- **Skills:** Java (Programming Language), JavaScript (Programming Language), Code Review, Github, Open Web Application Security, Systems Development Life Cycle, Secure Coding, Software Engineering, SonarQube, TypeScript, Software Vulnerability Management, Spring-boot, Sonatype, Software Security, Veracode, AngularJS, Checkmarx, Software Coding, Restful APIs, Devsecops, Static Application Security Testing, Microservices, Dynamic Application Security Testing
- **Published:** September 3, 2026
- **Apply:** https://www.dice.com/job-detail/62de1345-1235-4a70-8a5d-42fbe425a6c9

## About the Role

* 10+ years of software engineering experience.

 * Strong hands-on expertise in Java, Spring Boot, Angular, JavaScript/TypeScript, REST APIs, and Microservices.

 * Experience working with GitHub, CI/CD pipelines, and modern software delivery practices.

 * Deep understanding of OWASP Top 10, Secure SDLC, DevSecOps, SAST, DAST, and vulnerability management.

 * Experience with security tools such as ArmorCode, Contrast Security, Snyk, Veracode, Checkmarx, or SonarQube.

 * Strong leadership, communication, and stakeholder management skills.

Must Have Skills:

Vulnerability Management & Healthcare Security

Governance Change

Management Software Security

Java / Spring Boot / Angular

## Description

* Lead security remediation efforts across multiple VTS engineering teams.

 * Analyze findings from ArmorCode, Contrast, Snyk, SonarQube, and related security tools.

 * Prioritize, track, and drive closure of security vulnerabilities.

 * Perform hands-on coding and implement security fixes in Java/Spring Boot and Angular applications.

 * Conduct code reviews and recommend secure coding practices.

 * Develop reusable remediation patterns to reduce vulnerabilities across multiple applications.

 * Collaborate with engineering, architecture, and security teams.

 * Lead and mentor a 3-5 member security remediation team.

 * Provide status updates, dashboards, and executive-level reporting.


## Related Videos

- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [Open sourcing a library: how hard can that be?](https://www.wearedevelopers.com/videos/1058-open-sourcing-a-library-how-hard-can-that-be)
- [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Bringing AI Model Testing and Prompt Management to Your Codebase with GitHub Models](https://www.wearedevelopers.com/videos/1536-bringing-ai-model-testing-and-prompt-management-to-your-codebase-with-github-models)
- [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 176: Expensive Agents, Taking Over VSCode and Safer Vibe Coding](https://www.wearedevelopers.com/magazine/603-dev-digest-176-expensive-agents-taking-over-vscode-and-safer-vibe-coding)