Application Security Engineer

Cybersecurity Jobs; Ashburn (VA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive salary

Best in class medical coverage

Paid time off and holidays

401k with company match

Training and certifications

Job summary

Cybersecurity Jobs is hiring a Senior Application Security Engineer to secure CBP application systems across the full software lifecycle. This onsite role based in Ashburn, VA focuses on security operations, lifecycle management, and risk-informed engineering.

You will produce security documentation for ISSOs and support ATO/ATT activities, conduct weekly impact assessments, enhance logging and SIEM integration, and contribute to continuous monitoring and change-control processes.

Qualifications

• Minimum 7 years of relevant application security or security engineering experience.
• Experience leading application security operations and lifecycle management.
• Experience supporting ATO or ATT activities and risk decisions.
• Strong written and oral communication for technical coordination with ISSOs and Government leads.

Responsibilities

• Administer, configure, maintain, tune, and secure CBP application systems throughout the software lifecycle.
• Develop and maintain application operations and maintenance procedures and tuning guidance.
• Support ISSOs during ATO and ATT activities with required documentation.
• Conduct weekly application security impact assessments.
• Maintain continuous application monitoring with incident alerting and status reporting.
• Apply configuration management and change-control processes for baselines and deployments.
• Improve application logging and integrate with SIEM and vulnerability-management processes.

Skills

Security operations

Lifecycle management

Configuration control

Logging & monitoring

Vulnerability remediation

ATO/ATT support

Tools

SIEM

Job description

Senior Application Security Engineer role focused on securing and sustaining CBP application systems across the full software lifecycle.

Responsibilities

• Administer, configure, maintain, tune, and secure CBP application systems throughout the software lifecycle.
• Develop and keep current application operations and maintenance procedures, tuning guidance, and software maintenance recommendations.
• Support ISSOs during ATO and ATT activities by producing and maintaining required application security documentation and evidence.
• Conduct weekly application security impact assessments and evaluate proposed software, products, and emerging technologies.
• Maintain continuous application monitoring, including critical-incident alerting, operational status reporting, and service-request tracking.
• Apply configuration management and change-control processes for application baselines, configuration items, engineering changes, and deployment records.
• Improve application logging, integrate relevant data with SIEM and vulnerability-management processes, and support remediation tracking.

Requirements

• Minimum 7 years of relevant application security or security engineering experience.
• Proven ability to lead application security operations, lifecycle management, configuration control, logging and monitoring, and vulnerability remediation efforts.
• Advanced experience supporting ATO or ATT activities, including security impact assessments, product evaluations, change approvals, and operational risk decisions.
• Strong written and oral communication skills for technical recommendations, procedures, status reporting, and coordination with ISSOs and Government leads.

Technologies

• SIEM

Location & Work Setup

• Ashburn, VA (onsite)

Benefits

• Competitive salary; paid twice per month
• Best in class medical coverage
• 100% of medical premiums covered by True Zero
• Company wide new business incentive programs
• Contribution Incentives (white papers, blog posts, internal webinars, etc.)
• 3 weeks of PTO starting + 11 Paid Holidays annually
• 401k Program with 100% company match on the first 4%
• Monthly reimbursement of Cell Phone and Home Internet costs
• Paternity/Maternity Leave
• Investment in training and certifications to broaden and deepen technical skills

AI Use Notice

• May use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications and analyzing.
• AI tools assist the recruitment team and do not replace human judgment.
• Final hiring decisions are made by humans.
• For details on how data is processed, contact the company.