Application Security Engineer III in Arlington

Job Description

Position Overview

We are seeking a highly experienced Application Security Engineer to help design, build, and mature application security capabilities across a large-scale engineering organization. This role will combine deep expertise in application security, secure software design, risk management, cloud- architectures, DevSecOps, and security automation.

The ideal candidate will be a hands-on security engineer who can work closely with software developers, architects, DevOps, cloud engineering, data science, and cybersecurity teams to identify complex security risks and build scalable, automated controls throughout the software development lifecycle.

Required Qualifications

• Strong professional experience in Application Security, AppSec Engineering, Cloud Security, Software Engineering, or a closely related discipline.
• Deep expertise in application security, secure software design, and technology risk management.
• Strong knowledge of: OWASP ASVS, OWASP Top 10, NIST SP 800-53. Secure SDLC / SSDLC, Threat modeling, Risk assessment and vulnerability management
• Extensive experience conducting complex security assessments across large-scale engineering environments.
• Demonstrated ability to design and implement automated security controls and security tooling.
• Proficiency in multiple programming , preferably including Python, Java, and JavaScript/TypeScript.
• Hands-on experience with SAST, DAST, SCA, IaC, container, API, and cloud security technologies.