> Markdown version of [/jobs/ext/3282814-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/3282814-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Application Security Engineer - **Company:** STEAMPUNK INC. - **Location:** McLean, VA, United States - **Experience:** Experienced - **Salary:** $100,000.0 - $155,000.0 - **Contract:** Permanent contract - **Skills:** Java (Programming Language), .NET Framework, Agile Methodology, Amazon Web Services, Apache HTTP Server, Apache Tomcat, Server Applications, JIRA, Microsoft Azure, C Sharp (Programming Language), Databases, Web Servers, Internet Information Services (IIS), Python (Programming Language), PostgreSQL, Apache Maven, Oracle (Applications), Public Key Infrastructure, Ansible, Web Application Security, Software Engineering, Software Vulnerability Management, HP WebInspect, Diagnostic Tools, Enterprise Software Applications, Load Balancing, Sysadmin, Software Security, Git, Web Technologies, Jenkins, Servicenow, Dynamic Application Security Testing - **Published:** September 30, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9205366/application-security-engineer ## About the Role * Ability to obtain a U.S. government Security Clearance * Master's Degree and 3 years of relevant experience; OR + Bachelor's Degree and 5 years of relevant experience; OR + No degree and 9 years of relevant experience * Possesses at least one professional certification relevant to the technical service provided. Maintain a certification relevant to the product being deployed and/or maintained. Preferred: * Former Developer or Systems Administrator experience * Working knowledge of technologies used for building and deploying enterprise applications, such as, Maven, Grade, GIT, Jenkins, Ansible, Java, C#/.NET, Apache Tomcat, Apache HTTP Server, IIS, F5, Oracle, MSSQLSEVER, PostGres * Working knowledge and experience in AWS and Azure GovClouds * Ability to analyze DISA STIG audit compliance scan results and provide recommendations for resolution * Analyze security environment, provide recommendations * Working knowledge of JIRA, Service Now or equivalent * Working knowledge of operating system and dynamic application security testing scan tools - Invicti, Web Inspect, DAST/IAST suites * Experience using Python to automate tasks Certifications: * CEH, GFACT, GPEN, OSCP or other relevant industry certifications * Other Application based Technology specific certifiations ## Description As a Web Application Security Engineer, you will provide technical expertise and solutions to remediate persistent and challenging portfolio-wide vulnerabilities. We're looking for someone who has passion for IT, resourceful problem-solving abilities, and a desire to learn our indicators of success in this role. The ideal candidate will have a breadth of experience over a variety of application and web based technologies. The candidate will not necessarily have deep experience in all domain areas but should have a good understanding of how the various layers of an enterprise application stack interact with one another. You will work directly with system admin teams to assist and remediate vulnerabilities and harden environments, while providing recommendations on ways to enhance vulnerability management. Additionally, you will work in a team environment to develop proactive solutions to improve overall enterprise security posture through process streamlining and automation. Contributions * Provide subject matter expertise for various risk assessments, working in an Agile environment with an understanding of the full software development lifecycle. * Advocate for and ensure appropriate security practices are communicated and implemented within application development portfolios. * Ability and proven experience in securing multiple areas of an enterprise application stack, including the OS, Database, Application Server, Load Balancer, and Web Server layers. Understanding how PKI/TLS certificates work is a must. * Integrate with both the application development and security assurance divisions to ensure vulnerability findings are understood, remediated or baselined as appropriate. * Document & Socialize security findings and remediation solutions in an enterprise knowledge base. * Support the Information Assurance Branch and the SOC with scan analysis and partner with development teams to understand and remediate security findings. ## Related Videos - [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94) - [GitOps for the people](https://www.wearedevelopers.com/videos/461-gitops-for-the-people) - [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Git for Code Reviews](https://www.wearedevelopers.com/videos/429-git-for-code-reviews) - [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs)