> Markdown version of [/jobs/ext/4704921-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/4704921-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security Engineer

- **Company:** Battelle Memorial Institute
- **Location:** Arlington, VA, United States
- **Experience:** Experienced
- **Salary:** $130,000 - $190,000
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), JavaScript (Programming Language), .NET Framework, PHP (Programming Language), Software Applications, Software System Penetration Testing, C Sharp (Programming Language), C++ (Programming Language), Ubuntu (Operating System), Software as a Service, Cloud Computing, Cyber Security, Information Systems, Continuous Integration, Firmware, Python (Programming Language), Linux Distribution, Systems Development Life Cycle, Red Hat Enterprise Linux, Ruby, Reverse Engineering, Software Engineering, Verification and Validation (Software), TypeScript, Virtual Machines, Software Vulnerability Management, Software Security, Mitre Att&ck, Static Application Security Testing, Golang
- **Published:** November 13, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9309626/application-security-engineer

## About the Role

* Active DoD SECRET Clearance or DHS "Enter on Duty" (EOD) or "Full Suitability Approval" (FSA) Background Investigation status; US Citizenship required
 * 5+ years software engineering experience with compiled and interpretive programming languages.
 * 4+ years of experience in information assurance and/or cybersecurity
 * Bachelors Degree (BS/BA)
 * Experience with decompiling and reverse engineering tools such as Ghidra and JDecompiler
 * Experience with SAST tools such as Black Duck Coverity
 * Experience with software composition analysis tools such as Anchore Syft
 * Familiarity with Software Bills of Materials (SBOMs)
 * Experience with virtual machines
 * Experience with common Linux distributions, such as Ubuntu and Red Hat
 * Experience programming in Java, C/C++, C#/.NET, Python, and JavaScript
 * Proven experience working in collaborative sessions demonstrating strong verbal and written communication skills along with tactful negotiation skills
Certified Information Systems Professional (CISSP), * Current DHS Security Suitability

 * M.S. in Information Systems or related field
 * Certified Secure Software Lifecycle Professional (CSSLP)
 * Experience with Ruby, Rust, Go, TypeScript, and PHP
 * Experience with Continuous Integration / Continuous Development (CI /CD) Pipelines
 * Penetration Testing experience and/or certifications
 * Experience with C-UAS, Sea (Maritime), Air, and/or Border operations and DHS systems
 * Experience with IT Security Engineering in support of systems development, interface, and/or architecture requirements and concepts
 * Familiarity with MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) Framework
 * Familiarity with NIST SP 800-53 Rev. 5
 * Familiarity with DHS 4300A
 * Experience with cloud application security
 * Experience with cloud environment operations
 * Consulting environment experience
 * Military veteran with relevant Application Security, IT and computer security experience will be considered a plus.

## Description

Battelle is a world leader in science and technology services and research. The Cyber Innovations Unit, Cyber Architecture & Advisory Services Practice of the National Security Global Business division specializes in providing advanced information assurance (IA) solutions to our government and commercial clients. The Cyber Architecture & Advisory Services is seeking an Application Security Engineer to work under the direction of an Application Security Subject Matter Expert (SME) in support of multiple DHS S&T Research, Development, & Innovation (RD&I) efforts. The Application Security Engineer will conduct Independent Verification and Validation (IV&V) of mission critical software applications protecting the homeland's Land, Sea (Maritime), Air, Space, and Cyberspace domains., * Evaluate and analyze application software and firmware source code and binaries for exploitable weaknesses

 * Utilize application security testing tools to identify potential vulnerabilities
 * Conduct Static Application Security Testing (SAST) on source code repositories and executable binaries
 * Research exploitation methods and develop exploits for identified vulnerabilities
 * Write vulnerability remediation recommendations, including updates, source code corrections, or other mitigations
 * Write in-depth software security reports that include summarized findings and describe the risks
 * Present findings to software development teams
 * Brief assessment results to senior leadership and executives

Other job responsibilities:

 * Reverse engineer application software and firmware binaries when required under the guidance of the Senior Application Security Engineer
 * Evaluate and analyze leading edge security technologies to be implemented to improve the organization's security posture.
 * Work with research and development (R&D) organizations to define requirements to design and develop leading-edge security solutions.
 * Collaborate with fellow Cyber Security Practice Team Members both locally and across the Cyber Security Practice in the full-lifecycle development and delivery of security technology solutions.
 * Actively contribute to the Battelle Cyber process improvement initiatives
 * Actively participate in leading edge cyber security conferences, working groups and training