> Markdown version of [/jobs/ext/3716114-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/3716114-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security Engineer

- **Company:** CareerCircle
- **Location:** Washington, DC, United States (Remote available)
- **Experience:** Starter
- **Salary:** $72,800.0 - $83,200.0
- **Contract:** Temporary contract
- **Skills:** Java (Programming Language), .NET Framework, Agile Methodology, Artificial Intelligence, Amazon Web Services, Proxy Servers, Software System Penetration Testing, Systems Engineering, Automated Storage and Retrieval Systems, User Authentication, Microsoft Azure, Burp Suite, Software as a Service, Cloud Computing, Cloud Computing Security, Configuration Management, Code Review, Signals Intelligence, CompTIA Security+, Cyber Security, Information Systems, Computer Programming, Databases, Continuous Delivery, Continuous Integration, Information Leak Prevention, Linux, DevOps, Digital Forensics, Dynamic Program Analysis, Fuzz Testing, Github, Monitoring of Systems, Intrusion Detection and Prevention, Virtual Private Networks (VPN), Information Systems Security Architecture Professional, JavaScript Libraries, Python (Programming Language), Key Management, Network Security, Open Web Application Security, Windows PowerShell, Systems Development Life Cycle, Red Hat Enterprise Linux, Power BI, Ansible, Secure Coding, Security Information and Event Management, Software Engineering, Software Systems, SonarQube, Software Vulnerability Management, Scripting, Google Cloud, Enterprise Software Applications, Computer Network Operations, ReactJS, Software Security, Software Application Programming, Cyber Threat Analysis, Firewalls (Computer Science), Gitlab, Cloudformation, Information Technology, Nessus, Cloudwatch, Burpsuite, Oracle Cloud Infrastructure, Splunk, Devsecops, Servicenow, Plan of Action and Milestones, Static Application Security Testing, Vulnerability Analysis, Programming Languages, Dynamic Application Security Testing
- **Published:** October 13, 2026
- **Apply:** https://www.careercircle.com/jobs/all/all/usa/dc/washington/ae9e5b12-ac85-4f4c-8d99-23dc383f03de

## About the Role

Bachelors Degree in Information Technology, Computer Science, or related field, or equivalent experience.

35 years of experience in cybersecurity or application security roles.

Familiarity with security frameworks and standards such as OWASP Top 10, NIST,.

Experience with at least one programming language (e.g., Java, Python, .Net) and scripting.

Understanding of secure architecture principles for web and cloud-based applications.

Exposure to security testing tools and techniques (e.g., static/dynamic analysis, Pen Testing).

Strong communication and collaboration skills.

Desired:

Security certifications such as SSCP, Security+, or working toward CISSP or similar.

Experience in using ServiceNow platform.

Knowledge and experience in Azure cloud and Azure DevOps.

Knowledge and experience of PowerBI platform.

Skills

Security, Information security, Application support, SAST, DAST, azure devops, Python

Top Skills Details

Security,Information security,Application support,SAST,DAST,azure devops,Python

Additional Skills & Qualifications

Req qual call with Kiran

Mid Level Application Security Engineer

DevSecOps Experience 3+ years experience

 - how to Automate Tooling

 - What Devsec Ops does

Hands on programming experience

 - Developer in the past preferably .Net/Python but open to Java

 - At minimum atleast able to read and make minor code changes

Azure Platform Experience DEVOPS

SAST & DAST Code scanning experience

 - IMF uses HCL App Scan for SAST

 - Burpsuite for DAST

Power BI user experience

 - ability to create reports

ServiceNow (User Level Ticketing experience)

First 2 months of role will be looking at Vulnerabilities and following up with Technical team

 - Power BI Creating reports (Vulnerabilities by Division or by applications or Critical High to Low

 - Creating tickets in ServiceNow

 - Python

 - Automating Data, Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors., Cyber Security Policies
Configuration Management
Vulnerability Management
Certified Ethical Hacker
Cyber Security Standards
Cybersecurity Compliance
Risk Management Framework
Authorization (Computing)
Cyber Threat Intelligence
Cyber Security Assessment
IT Security Documentation
Agile Software Development
Splunk Enterprise Security
Google Cloud Platform (GCP)
Computer Network Operations
Change Management Processes
Information Systems Security
Customer Information Systems
React.js (Javascript Library)
Python (Programming Language)
Enterprise Application Software
Endpoint Detection And Response
Troubleshooting (Problem Solving)
Host Based Security System (HBSS)
Intrusion Detection And Prevention
CompTIA Cybersecurity Analyst (CySA+)
Plan Of Action And Milestones (POA&M)
Security Information And Event Management (SIEM)
Certified Information Systems Security Professional
Top Secret-Sensitive Compartmented Information (TS/SCI Clearance), Hardening
Visionary
SonarQube
DevSecOps
Operations
Leadership
Innovation
Mitigation
Encryption
Coordinating
Fuzz Testing
Communication
Collaboration
Cyber Security
Prioritization
Cloud Security
Security Tools
Attack Vectors
Access Controls
Threat Modeling
Software Systems
Security Controls
Amazon CloudWatch
Industry Standards
Penetration Testing
Amazon Web Services
Information Privacy
Continuous Delivery
Continuous Integration
Effective Communication
Vulnerability Management
Risk Management Framework
Authorization (Computing)
Engineering Design Process
Information Systems Security
Security Requirements Analysis
Continuous Improvement Process
Plan Of Action And Milestones (POA&M)
Static Application Security Testing (SAST)
Dynamic Application Security Testing (DAST)
CompTIA Advanced Security Practitioner (CASP+)
Certified Information Systems Security Professional
Enterprise Mission Assurance Support Service (eMASS), Market Data
Cyberattack
Coordinating
Cryptography
Player Coach
Proxy Servers
Cyber Security
Key Management
Security Tools
Attack Vectors
Detail Oriented
Problem Solving
Cloud Computing
Ancient History
Database Systems
Network Security
Security Controls
Incident Response
Digital Forensics
Endpoint Security
Cyber Engineering
Analytical Method
Windows PowerShell
AWS CloudFormation
Medical Monitoring
Amazon Web Services
Time Off Management
Security Engineering
Technical Leadership
Data Loss Prevention
Signals Intelligence
Programming Languages
Technical Engineering
Vulnerability Scanning
Text Retrieval Systems
Education and Training
Red Hat Enterprise Linux
Cyber Threat Intelligence
Agile Software Development
Computer Network Operations
Change Management Processes
Customer Information Systems
React.js (Javascript Library)
Python (Programming Language)
Virtual Private Networks (VPN)
Enterprise Application Software
Troubleshooting (Problem Solving)
Host Based Security System (HBSS)
Security Information And Event Management (SIEM)

## Description

Tooling
Power BI
Scripting
Operations
Automation
ServiceNow
Burp Suite
Azure DevOps
Communication
Secure Coding
Cyber Security
.NET Framework
Microsoft Azure
Threat Modeling
Computer Science
Security Testing
Security Controls
Technical Support
CompTIA Security+
Business Valuation
Penetration Testing
Application Security
Information Technology
Full Stack Development
Business Transformation
Dynamic Program Analysis
Java (Programming Language)
Python (Programming Language)
Security Requirements Analysis
Systems Development Life Cycle
Software Development Life Cycle
Systems Security Certified Practitioner
Static Application Security Testing (SAST)
Dynamic Application Security Testing (DAST)
Open Web Application Security Project (OWASP)
Certified Information Systems Security Professional, To support the integration of security into the software development lifecycle, the Application Security Engineer will collaborate with development and infrastructure teams to help remediate vulnerabilities, assess application risks, and help maintain a secure posture of the applications. This role is ideal for someone with hands-on experience in application security who is looking to grow their technical depth and experience.

Responsibilities:

Collaborate with development teams to promote secure coding practices and assist in identifying and mitigating security vulnerabilities.

Contribute to the implementation of Secure SDLC standards, including security requirements for application design and development.

Assist in integrating application security tools such as SAST, DAST, and SCA into CI/CD pipelines.

Review security testing results and support remediation efforts for identified vulnerabilities.

Help implement security controls for applications deployed in both on-premises and cloud environments.

Participate in threat modeling and security design reviews under the guidance of senior engineers.

Support training efforts and knowledge sharing on secure development practices within engineering teams.

Stay current with emerging security threats, vulnerabilities, and industry best practices., Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.
Related Jobs
Cybersecurity Engineer SME
Leidos

Bethesda, MD*On-Site

Linux
CI/CD
Splunk
Nessus
Rapid7
Ansible
Auditing
Firewall
Equities
Scripting
SonarQube
DevSecOps
Pipelines
Operations
Automation
Purchasing
Upskilling
Market Data
Coordinating
Oracle Cloud
Cryptography
Investigation
Cyber Security
Key Management
Risk Management
Authentications
Cloud Computing
Ancient History
Network Security
Security Controls
Incident Response
CompTIA Security+
Digital Forensics
System Monitoring
Endpoint Security
Cyber Engineering
Analytical Method
Windows PowerShell
AWS CloudFormation
Systems Engineering
Amazon Web Services
Time Off Management
Security Engineering
Software Development
Contingency Planning
Signals Intelligence
Programming Languages
Regulatory Frameworks
Vulnerability Scanning
Security Configuration, Splunk
Gitlab
Github
Ansible
Auditing
Firewall
Equities
Scripting
DevSecOps
Pipelines
Operations
Leadership
Management
Automation
Mentorship
Purchasing
Upskilling