Application Security Engineer
Job Description
Advance your application security leadership in a federal environment with Accenture Federal Services in Washington, DC (onsite). This role supports secure delivery practices across the software lifecycle, with opportunities to improve team workflows using AI tools. The position offers a competitive salary range of USD 109,500 - 224,200 per year and calls for a hands-on AppSec leader to integrate threat-focused practices into agile development.
What you’ll do
- Lead an AppSec scrum team and run all agile ceremonies.
- Prioritize the security backlog, coach teammates on AppSec best practices, and partner across security, development, and operations.
- Use AI tools to enhance team workflows and efficiency.
- Test, triage, and help remediate web and AI application vulnerabilities, providing clear and actionable guidance.
- Architect and maintain secure CI/CD pipelines using GitLab and Jenkins.
- Harden build processes and strengthen supply chain security, including SBOM management.
- Lead shift-left threat modeling and collaborate with engineers to address risks early.
- Ensure AI agents and pipelines follow secure design principles.
- Integrate security tooling into developer workflows, including Snyk, Nexus, and JFrog.
- Manage dependency lifecycles and ensure artifacts are verified and signed.
- Balance security requirements with delivery velocity in a federal setting, navigating technical and organizational gray areas effectively.
What you bring
- 6+ years of software engineering and application or infrastructure security, including hands-on production coding experience.
- Proven experience securing CI/CD pipelines.
- Foundational understanding of one or more build systems such as Gradle, Maven, and build/runtime ecosystems including Docker and Kubernetes.
- Experience working with SBOM formats, including CycloneDX and SPDX.
- Strong understanding of AppSec principles, SSDF, threat modeling, and secrets management.
Skills and tools
- GitLab, Jenkins
- Snyk, Nexus, JFrog
- SBOM (CycloneDX, SPDX)
- Gradle, Maven
- Docker, Kubernetes
- Sigstore, Cosign
Bonus
- Experience with artifact signing using Sigstore and Cosign.
Eligibility requirements
- US Citizen
- Eligible to obtain a Public Trust clearance
Location: Washington, DC (onsite)
Compensation: USD 109,500 - 224,200 per year