Application Security Engineer – Software Vulnerability Remediation

Concept Solutions, LLC (CS) is seeking an Application Security Engineer to support a mission-critical application modernization program for a Department of War (DoW) customer.

This program will modernize and streamline access across a portfolio of production applications, creating a unified platform with single sign-on, a common user interface, and a repeatable approach to integrating applications—all while maintaining and supporting existing systems.

In this role, you will help strengthen application security by identifying and remediating vulnerabilities, supporting continuous monitoring activities, and collaborating with software development teams to implement secure coding practices.

This is an opportunity to contribute directly to the security and reliability of mission-critical federal applications.

• Identify and remediate security findings across existing production applications, including dependency vulnerabilities, container vulnerabilities, STIG compliance issues, and code-level findings identified through security scans and assessments.
• Maintain accurate and current Plans of Action and Milestones (POA&Ms) for the application portfolio, tracking security findings and remediation progress.
• Collaborate with the Information System Security Engineer (ISSE) to develop and maintain application security evidence supporting continuous monitoring requirements.
• Partner with software development squads to implement secure coding fixes and address vulnerabilities in application codebases.
• Support ongoing application security improvements while ensuring the continued operation and sustainment of production applications.