Application Security Engineer

Acclaim Technical Services; Reston (VA); On-site; USD 210,000 - 260,000; Full time

Job summary

Acclaim Technical Services is seeking an Application Security Engineer for an onsite Reston, VA role focused on end-to-end budget traceability for a cloud-native platform.

You will integrate security across the software development lifecycle, lead security reviews, threat modeling, secure coding practices, and implement DevSecOps in CI/CD pipelines while communicating risks to technical and non-technical stakeholders.

Qualifications

• Hands-on expertise in application security and secure SDLC across OCI/Oracle Cloud environments.
• Experience leading security reviews, threat modeling, secure code reviews, and vulnerability remediation.
• Strong programming skills in Python/JavaScript/SQL and shell scripting; familiarity with PL/SQL.
• Proficiency with SAST/DAST/SCA, secrets scanning, and container/infrastructure vulnerability scanning.
• Experience building cloud-native apps with Kubernetes, containers, Docker, REST APIs, and CI/CD pipelines.
• Knowledge of NIST RMF/OSSF frameworks and OWASP; 8+ years in related fields; Azure preferred.

Responsibilities

• Integrate security across the software development lifecycle by partnering with developers and cloud engineers to design, build, assess, and sustain secure mission applications.
• Lead design reviews, threat modeling, secure code reviews, security testing, vulnerability remediation, and release authorization support.
• Develop or review applications using Python, JavaScript frameworks, SQL, Shell scripting, PL/SQL, and other languages with strong secure coding practices.
• Execute application security testing using SAST, DAST, SCA, secrets scanning, and container/infrastructure vulnerability scanning.
• Build and secure cloud-native applications and services using Kubernetes, containers, Docker, REST APIs, and CI/CD pipelines.
• ImplementDevSecOps practices by adding automated security controls and testing into build and deployment pipelines.

Skills

Application security

DevSecOps

Threat modeling

Secure SDLC

Agile

Cloud security

Education

Bachelor's degree in engineering or computer science

Master's degree preferred

Tools

Python

JavaScript

SQL

Shell scripting

PL/SQL

Kubernetes

Docker

REST APIs

CI/CD pipelines

SAST

DAST

SCA

Secrets scanning

OCI

Oracle RDBMS

Job description

Acclaim Technical Services is hiring an Application Security Engineer for an onsite role in Reston, VA focused on end-to-end budget traceability for a cloud-native, centralized platform.

Responsibilities

• Integrate security throughout the software development lifecycle by partnering with developers and cloud engineers to design, build, assess, and sustain secure mission applications.
• Lead secure design and architecture reviews, threat modeling, secure code review, security testing, vulnerability remediation, and release authorization support.
• Develop or review applications using Python, JavaScript frameworks, SQL, Shell scripting, PL/SQL, and other programming languages with strong secure coding practices.
• Execute application security testing using SAST, DAST, SCA, secrets scanning, and container or infrastructure vulnerability scanning.
• Build and secure cloud-native applications and services using Kubernetes, containers, Docker, REST APIs, and CI/CD pipelines.
• Implement DevSecOps practices by adding automated security controls and testing into build and deployment pipelines.
• Assess, prioritize, document, and communicate application and cloud security risks, findings, and remediation recommendations to both technical and non-technical stakeholders.

Requirements

• Hands-on expertise in application security, secure software development, software engineering, or DevSecOps, applied to Oracle Cloud and customer mission challenges.
• Experience integrating security across the SDLC, including secure design/architecture reviews, threat modeling, secure code review, security testing, vulnerability remediation, and release authorization support.
• Experience developing or reviewing applications with Python, JavaScript frameworks, SQL, Shell scripting, PL/SQL, and other programming languages.
• Experience with application security testing tools and processes: SAST, DAST, SCA, secrets scanning, and container/infrastructure vulnerability scanning.
• Experience building and securing cloud-native applications and services using Kubernetes, containers, Docker, REST APIs, and CI/CD pipelines.
• Experience implementing DevSecOps practices with automated security controls and testing in build/deployment pipelines.
• Experience with cloud-native security services and controls; Oracle Cloud Infrastructure (OCI) experience is desired.
• Knowledge of security frameworks and standards including NIST RMF, NIST Secure Software Development Framework, OWASP, DISA STIGs, and applicable federal security requirements.
• Experience securing Oracle RDBMS environments, including database access controls, encryption, auditing, and secure handling of sensitive data.
• Ability to assess, prioritize, document, and communicate application and cloud security risks and remediation recommendations to technical and non-technical stakeholders.
• Passion for technology and willingness to continuously learn new security tools, techniques, and approaches for complex technical problems.
• Experience working in an Agile framework.
• 8+ years of relevant experience in application security, software engineering, DevSecOps, cybersecurity, or a related technical discipline.
• Bachelor’s Degree in engineering, computer science, or related technical discipline; Master’s degree preferred.

Technologies

• Oracle Cloud, Oracle Cloud Infrastructure (OCI)
• Python, JavaScript frameworks
• SQL, Shell scripting, PL/SQL
• Static application security testing (SAST)
• Dynamic application security testing (DAST)
• Software composition analysis (SCA)
• Secrets scanning, container vulnerability scanning, infrastructure vulnerability scanning
• Kubernetes, containers, Docker
• REST APIs, CI/CD pipelines
• DevSecOps practices
• NIST RMF, NIST Secure Software Development Framework, OWASP, DISA STIGs
• Oracle RDBMS, encryption, auditing

Desired Skills and Qualifications

• OCI IaaS and/or PaaS certifications are preferred.
• Security certifications such as CISSP, CSSLP, Security+, GIAC, CEH, OSCP, or comparable credentials.
• Experience implementing identity and access management, privileged access controls, secrets management, encryption, logging, monitoring, and incident response capabilities in cloud environments.
• Experience with AI technologies for software development and securing AI-enabled applications or development workflows.
• Data engineering experience, including securing data validations, business rules, data transformations, and sensitive-data handling.

Salary Range

• $210,000 - $260,000 per year (USD)