> Markdown version of [/jobs/ext/3922139-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/3922139-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security Engineer

- **Company:** CACI International Inc.
- **Location:** O'Fallon, IL, United States
- **Experience:** Experienced
- **Salary:** $75,200.0 - $158,100.0
- **Contract:** Contract
- **Skills:** Java (Programming Language), Software System Penetration Testing, Software Quality, Code Review, Cyber Security, Information Systems, Python (Programming Language), Open Web Application Security, Comptia Pentest+ CE, Fortify (Software), Secure Coding, Software Engineering, SonarQube, Software Vulnerability Management, Scripting, Software Security, Information Technology, Devsecops, Static Application Security Testing, Dynamic Application Security Testing
- **Published:** October 26, 2026
- **Apply:** https://www.techcareers.com/job.asp?id=3467251880&tx=TT4037TTZ&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

Required:

 * Active Secret or TS clearance
 * 3-5 years of experience in application security, secure development, or penetration testing
 * Hands-on experience with SAST platforms (Fortify preferred)
 * Working knowledge of OWASP Top 10 and common application vulnerability classes
 * Demonstrated experience conducting or supporting penetration tests
 * DoD 8140.03M DCWF Basic Tier - CEH
 * DoD 8140 Interim Education Options Required to travel to Scott Airforce base on a quarterly basis

Desired:

 * DoD 8140.03M DCWF Intermediate Tier - one of: CEH(P), RCCE Level 1, Cloud+, CPTE, FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security+ Bachelor's degree in Computer Science, Cybersecurity, Data Science, Information Systems, IT, or Software Engineering
 * Experience with SonarQube or similar secure code analysis platforms
 * Familiarity with DevSecOps pipelines and CI/CD security integration
 * Scripting or development experience in Python, Java, or similar languages

## Description

* Execute both static (SAST) and dynamic (DAST) application security testing using enterprise tooling
 * Lead and support penetration testing engagements, guiding developers through actionable remediation
 * Work within a fully staffed cybersecurity program-including architecture, GRC, and operations experts
 * Grow your expertise across the AppSec spectrum: code review, runtime testing, and compliance validation, * Perform SAST using Fortify across assigned applications
 * Conduct continuous code quality and security analysis using SonarQube
 * Execute DAST to identify runtime vulnerabilities
 * Coordinate and execute penetration testing engagements
 * Conduct secure code reviews and document findings with actionable guidance
 * Track and verify vulnerability remediation through closure
 * Validate application security controls against program and DoD requirements
 * Author application security assessment and penetration test reports
 * Support the Cybersecurity Architect with secure SDLC process design