Application Security Engineer
Summary
Senior Application Security Engineer at Accenture Federal Services who leads an AppSec scrum team embedding security into the SDLC for US federal clients. Day to day: securing CI/CD pipelines (GitLab, Jenkins), threat modeling, testing web/AI app vulnerabilities, and integrating tools like Snyk, Nexus, and JFrog with SBOM/supply-chain practices.
The work
We are seeking a Senior Application Security Engineer to partner with development teams and ensure secure, scalable software delivery. This role leads the AppSec scrum team, integrates security into the development lifecycle, and designs processes that enable developers to work securely and efficiently. Candidates should bring hands‑on engineering experience and a strong understanding of modern application security.
Key Responsibilities:
Team Leadership
- Lead the AppSec scrum team and all agile ceremonies.
- Prioritize the security backlog and guide teammates on best practices.
- Drive collaboration across security, development, and operations.
- Use AI tools to improve team workflows and efficiency.
Application & AI Security
- Test and triage security vulnerabilities for web and AI applications.
- Provide clear, actionable remediation guidance.
Pipeline Security
- Architect and maintain secure CI/CD pipelines (GitLab, Jenkins).
- Implement hardened build processes and secure supply chain practices, including SBOM management.
Threat Modeling
- Lead shift-left threat modeling and partner with engineers to address risks early.
- Ensure AI agents and pipelines follow secure design principles.
Security Integration
- Integrate security tools (Snyk, Nexus, JFrog) into developer workflows.
- Manage dependency lifecycles and ensure artifacts are verified and signed.
Business Enablement
- Balance security needs with delivery velocity in a federal environment.
- Navigate technical and organizational gray areas effectively.
Qualifications
- 6+ years in software engineering and application/infrastructure security (hands on production coding experience).
- Proven experience securing CI/CD pipelines.
- Foundational understanding with one or more build systems (Gradle, Maven, Docker/Kubernetes).
- Experience with SBOM formats (CycloneDX, SPDX).
- Strong understanding of AppSec principles, SSDF, threat modeling, and secrets management.
Bonus:
- Experience with artifact signing (Sigstore/Cosign)
Eligibility Requirements:
- US Citizen
- Eligible to obtain a Public Trust clearance
As required by local law, Accenture Federal Services provides reasonable ranges of compensation for hired roles based on labor costs in the states of California, Colorado, Connecticut, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Ohio, Vermont, Virginia, Washington, and the District of Columbia. The base pay range for this position in these locations is shown below. Compensation for roles at Accenture Federal Services varies depending on a wide array of factors, including but not limited to office location, role, skill set, and level of experience. Accenture Federal Services offers a wide variety of benefits. You can find more information on benefits here. We accept applications on an on-going basis and there is no fixed deadline to apply.
Skills
As published by greenhouse · 16 questions
Basics
First Name, Last Name, Email, Phone, Resume/CV, Cover Letter, Location
Short answers (1)
- If yes, please list the full name of the employee(s) and your relationship to them. optional
Pick from a list (15)
- State
- Are you at least 18 years of age?
- Are you legally authorized to work in the United States?
- Many AFS positions require US citizenship. Please indicate your citizenship status so we can determine eligibility for specific roles. optional
- Will you now or in the future require sponsorship for employment visa status (for example, H-1B visa status)?
- Have you entered into a non-disclosure or non-compete agreement or understanding of any kind?
- Have you worked at Accenture in the past?
- How did you hear about us?
- Do you hold a security clearance?
- At your current employer, are you currently working on a project with Accenture or have you worked on a project with Accenture in the past 24 months?
- Are you a current employee of the U.S. Government (including U.S. Congress or military) or any state or local government? This includes entities owned or controlled by the U.S. Federal Government, such as Amtrak, the United States Postal Service, and USAID (see list of exceptions below). NOTE: answer yes if you have accepted the “Fork-in-the-Road” offer, separated with a Deferred Retirement Plan, or are on administrative leave pending separation from the Government.
- Will you be serving as enlisted personnel in either the Reserves or the National Guard while working for AFS?
- Were you an employee of the U.S. Government (including U.S. Congress or military) or any state or local government within the past 10 years? This includes entities owned or controlled by the U.S. Federal Government, such as Amtrak, the United States Postal Service, and USAID (see list of exceptions below).
- Do you have any family members or people you have close relationships with who work for Accenture Federal Services?
- Affirmation