Secure Application Development

Secure Application Development Engineer Jobs

3 jobs found

Today

Application Security Engineer

Acclaim Technical Services Reston, VA

Reston, VA

Today

$210k - $260k/yr Full time Application Security Application Security Engineering Application Security Testing

Apply Now

Job Description

Acclaim Technical Services is seeking an experienced Application Security Engineer to embed security across the software development lifecycle for a cloud-native, centralized platform supporting end-to-end budget traceability. This onsite role is based in Reston, VA, with TS/SCI w/ Polygraph required for the Bethesda, MD area.

Location

Reston, VA (onsite)

Salary

USD 210,000 - 260,000 per year

Summary

The role focuses on integrating security into design, development, assessment, and release activities for mission applications, partnering with developers and cloud engineers to sustain secure operations. Work includes threat modeling, secure reviews, vulnerability remediation, and support for release authorization.

Responsibilities

Integrate security throughout the software development lifecycle by partnering with developers and cloud engineers to design, build, assess, and sustain secure mission applications.
Perform secure design and architecture reviews, threat modeling, secure code reviews, security testing, vulnerability remediation, and release authorization support.
Develop or review applications using Python, JavaScript frameworks, SQL, Shell scripting, PL/SQL, and other programming languages, applying knowledge of common application vulnerabilities and secure coding practices.
Carry out application security testing using SAST, DAST, SCA, secrets scanning, and container or infrastructure vulnerability scanning.
Build and secure cloud-native applications and services using Kubernetes, containers, Docker, REST APIs, and CI/CD pipelines.
Implement DevSecOps practices, including automated security controls and testing within build and deployment pipelines.
Assess, prioritize, document, and communicate application and cloud security risks, findings, and remediation recommendations to technical and non-technical stakeholders.

Requirements

Technical expertise and hands-on experience in application security, secure software development, software engineering, or DevSecOps, including the ability to apply skills to Oracle Cloud and customer mission challenges.
Experience integrating security across the software development lifecycle, including secure design and architecture reviews, threat modeling, secure code review, security testing, vulnerability remediation, and release authorization support.
Experience developing or reviewing applications using Python, JavaScript frameworks, SQL, Shell scripting, PL/SQL, and other programming languages with knowledge of common application vulnerabilities and secure coding practices.
Experience with application security testing tools and processes, including SAST, DAST, SCA, secrets scanning, and container or infrastructure vulnerability scanning.
Experience building and securing cloud-native applications and services using Kubernetes, containers, Docker, REST APIs, and CI/CD pipelines.
Experience implementing DevSecOps practices, including automated security controls and testing within build and deployment pipelines.
Experience with cloud-native security services and controls; Oracle Cloud Infrastructure (OCI) experience is desired.
Knowledge of security frameworks and standards such as NIST RMF, NIST Secure Software Development Framework, OWASP, DISA STIGs, and applicable federal security requirements.
Experience securing Oracle RDBMS environments, including database access controls, encryption, auditing, and secure handling of sensitive data.
Ability to assess, prioritize, document, and communicate application and cloud security risks, findings, and remediation recommendations to technical and non-technical stakeholders.
Passion for technology and willingness to continuously learn new security tools, techniques, and approaches for complex technical challenges.
Experience working in an Agile framework.
8+ years of relevant experience in application security, software engineering, DevSecOps, cybersecurity, or related technical disciplines.
Bachelor’s Degree in engineering, computer science, or a related technical discipline (Master’s degree preferred).

Desired Skills and Qualifications

OCI IaaS and/or PaaS certifications are preferred.
Security certifications such as CISSP, CSSLP, Security+, GIAC, CEH, OSCP, or comparable credentials.
Experience implementing identity and access management, privileged access controls, secrets management, encryption, logging, monitoring, and incident response capabilities in cloud environments.
Experience with AI technologies for software development and securing AI-enabled applications or development workflows.
Data engineering experience, including securing data validations, business rules, data transformations, and sensitive-data handling.

Technologies

Oracle Cloud, Oracle Cloud Infrastructure (OCI)
Python, JavaScript frameworks, SQL, Shell scripting, PL/SQL
Static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), secrets scanning
Container vulnerability scanning, infrastructure vulnerability scanning
Kubernetes, containers, Docker, REST APIs, CI/CD pipelines
DevSecOps practices
NIST RMF, NIST Secure Software Development Framework, OWASP, DISA STIGs
Oracle RDBMS, encryption, auditing

Required Credentials and Experience

8+ years of relevant experience in application security, software engineering, DevSecOps, cybersecurity, or related technical discipline.
Bachelor’s Degree in engineering, computer science, or a related technical discipline (Master’s degree preferred).

View full job page →

1mo ago

Application Security Engineer

SpaceXAI Austin, TX

Austin, TX

1mo ago Closed

$100k - $258k/yr Full time Application Security Burp Suite Ci/cd Security

This position is no longer accepting applications (closed Nov 1, 2026).

Job Description

SpaceXAI seeks an Application Security Engineer in Austin, TX (onsite) to strengthen the security and integrity of payments and financial products across the software lifecycle.

Responsibilities

Run in-depth code reviews and static analysis to find and remediate security vulnerabilities in financial applications
Define and roll out secure coding guidelines and best practices for development teams
Partner with engineering teams to embed security into the CI/CD pipeline (DevSecOps practices)
Conduct threat modeling and risk assessments for payments, wallets, ledgers, and related product surfaces
Develop mitigation strategies for fraud, abuse, and unauthorized movement of funds or credits
Own vulnerability tracking and remediation guidance for development teams
Manage bug bounty program activities: intake, triage, researcher communication, and coordinated disclosure
Support application security incident response efforts
Monitor emerging threats targeting financial and cloud-native systems and continuously improve controls
Secure the software supply chain, including producing and maintaining Software Bills of Materials (SBOMs)
Design and implement agentic and LLM-based solutions to detect, investigate, or prevent security issues

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, or a related field
3–5 years of experience in application security, with a strong emphasis on code security practices
Experience with payments, money transmission, digital wallets, or related financial platforms
Deep understanding of secure coding practices, application security frameworks, and common vulnerabilities such as OWASP Top 10
Proficiency in Python or Rust with secure coding practices in these languages
Experience securing CI/CD pipelines and implementing DevSecOps
Familiarity with software supply chain security and SBOM generation tools
Experience with security testing tools (e.g., Burp Suite, OWASP ZAP) and static/dynamic code analysis
Experience securing payments, wallets, ledgers, and other high-value transaction systems, including controls for fraud, abuse, and integrity
Experience designing and implementing agentic and LLM-based security solutions
Excellent communication skills for explaining complex security topics to both technical and non-technical audiences

Technologies

Python, Rust
OWASP Top 10
Burp Suite, OWASP ZAP
Software Bills of Materials (SBOMs)
DevSecOps, CI/CD pipelines, GitOps
Agentic solutions, LLM-based solutions
Infrastructure-as-code

Benefits

Equity
Comprehensive medical, vision, and dental coverage
Access to a 401(k) retirement plan
Short & long-term disability insurance
Life insurance
Various other discounts and perks

Preferred Skills and Experience

Hands-on experience securing applications on AWS; familiarity with other cloud platforms is a plus
Relevant security certifications (e.g., BSCP, OSCP, OSWE)
Experience managing bug bounty programs
Background in data privacy and compliance related to financial products and cloud-native applications
Experience with GitOps and infrastructure-as-code security
Experience building custom security tooling to enhance and automate security processes
Contributions to open-source security projects or tools

Compensation and Benefits

$100,000 - $258,000 USD
Base salary is part of a total rewards package including equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks

ITAR Requirements

To conform to U.S. Government export regulations, applicants must be: (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or eligible to obtain required authorizations from the U.S. Department of State

View full job page →

1mo ago

Staff security engineer, application security

WRITER San Francisco, CA

San Francisco, CA

1mo ago Closed

$183k - $240k/yr Full time Ai Security Application Security Application Security Engineering

This position is no longer accepting applications (closed Oct 25, 2026).

Job Description

WRITER is building security foundations for AI systems used at enterprise scale, and this Staff security engineer role sits at the intersection of application security, AI infrastructure, and developer enablement. You will help shape how teams design, test, and ship security into production by default, including work across applications, AI services, and APIs in a hybrid environment based in San Francisco.

This role focuses on strengthening application security programs, advancing automated defenses in CI/CD, and partnering closely with engineering teams to reduce risk without slowing delivery.

Responsibilities

Build security into the DNA of the AI platform by running threat modeling sessions with product teams, designing secure architectures for new features, and ensuring security considerations influence product decisions from day one
Own and evolve the application security program, including establishing and maintaining SAST/DAST scanning in CI/CD pipelines, performing security code reviews for critical changes, and creating automation that identifies vulnerabilities before they reach production
Collaborate with engineering teams to champion secure coding standards, including reusable security patterns and libraries that help developers build securely by default
Design and recommend security features and products that protect customer environments, serving as the advocate and vision for how customer security is delivered
Integrate and leverage AI agents to increase velocity for the security team and the broader engineering organization while minimizing risk
Lead security assessments and penetration testing of WRITER applications, AI services, and APIs, identify vulnerabilities across the stack, and work with teams to remediate issues at scale
Design and implement security controls for data pipelines, model training environments, and customer-facing AI agents
Stay current on emerging AI/ML security threats by researching LLM and generative AI attack vectors and proactively building defenses against novel risks

Requirements

Minimum 4 years of hands-on experience in application security engineering, including a proven track record securing large-scale production systems (bonus for work in fast-growing startups or high-growth environments)
Strong understanding of developer experience and shipping workflows, with a focus on reducing risk while maintaining engineering velocity
Technical expertise in at least two programming languages: Python, Java, Go, JavaScript/TypeScript, with the ability to review code across multiple languages and assess both business logic and security implications
Knowledge of security tools and methodologies, including SAST/DAST, vulnerability management platforms, security testing frameworks, and DevSecOps, with clear judgment on when automation is preferable to manual review
Excellent communication skills to explain complex security concepts and translate them into actionable recommendations for technical and non-technical audiences
A builder’s mindset focused on automating, scaling, and enabling teams rather than introducing bottlenecks
Alignment with WRITER values: Connect, Challenge, and Own
Open to Mid, Sr., and Staff level candidates

Technologies

Python, Java, Go, JavaScript/TypeScript
SAST, DAST, CI/CD
AI agents, LLMs, generative AI, AI/ML

Benefits

Generous PTO plus company holidays
Medical, dental, and vision coverage for you and your family
Paid parental leave for all parents (16 weeks)
Fertility and family planning support
Early-detection cancer testing through Galleri
Flexible spending account and dependent FSA options
Health savings account for eligible plans with company contribution
Annual work-life stipends for wellness (gym, massage/chiropractor, personal training, etc.)
Annual work-life stipends for learning and development
Company-wide off-sites and team off-sites
Competitive compensation, company stock options, and 401k

View full job page →

Secure Application Development Engineer Jobs

Application Security Engineer

Application Security Engineer

Staff security engineer, application security

Get Secure Application Development Engineer Jobs alerts