Application Security Engineer

accenturefederalservices; Washington (District of Columbia); On-site; USD 79,000 - 160,000; Full time

Job summary

Accenture Federal Services seeks a Senior Application Security Engineer (DevSecOps) to bridge security governance with software delivery. You will design and maintain secure application pathways enabling AI-assisted development at scale.

You will lead secure CI/CD practices, integrate tools like Snyk, Nexus, and JFrog, and ensure artifacts are signed and compliant with federal requirements.

Qualifications

• 3+ years of hands-on software engineering and security experience.
• Proven experience securing CI/CD pipelines and delivering production-quality code.

Responsibilities

• Prioritize and manage the security backlog, mentoring team members on secure development practices.
• Test web and AI applications for vulnerabilities, triage findings, and provide actionable technical resolutions.
• Architect and maintain secure, automated CI/CD pipelines using GitLab CI/CD and Jenkins.
• Design hardened build processes and implement secure software supply chain controls.
• Implement and maintain SBOM lifecycle processes to ensure full dependency visibility.
• Ensure security-by-design for AI agents, development workflows, and CI/CD pipelines.
• Integrate security tools into developer workflows and manage complex dependency lifecycles.

Skills

CI/CD security

Secure coding

Security governance

Education

CSSLP, CISSP, CCSP certifications

Tools

GitLab CI/CD

Jenkins

Sigstore/Cosign

CycloneDX

SPDX

HashiCorp Vault

Job description

At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life better for people. Our 13,000+ people are united in a shared purpose to pursue the limitless potential of technology and ingenuity for clients across defense, national security, public safety, civilian, and military health organizations.

Join Accenture Federal Services, a technology company within global Accenture. Recognized as a Glassdoor Top 100 Best Place to Work, we offer a collaborative and caring community where you feel like you belong and are empowered to grow, learn and thrive through hands‑on experience, certifications, industry training and more.

Join us to drive positive, lasting change that moves missions and the government forward!

The work

The Senior Application Security Engineer (DevSecOps) serves as a strategic partner bridging security governance, software delivery velocity, and modern engineering practices. In this role, you will collaborate closely with development teams to design, implement, and maintain secure application pathways that empower engineering teams—and AI‑assisted development—to deliver code confidently at scale.

Key responsibilities:

• Prioritize and manage the security backlog, mentoring team members on secure development practices
• Test web and AI applications for vulnerabilities, triage findings, and provide actionable technical resolutions
• Architect and maintain secure, automated CI/CD pipelines using GitLab CI/CD and Jenkins
• Design hardened build processes and implement secure software supply chain controls
• Implement and maintain SBOM lifecycle processes to ensure full dependency visibility
• Ensure security‑by‑design for AI agents, development workflows, and CI/CD pipelines
• Integrate security tools (Snyk, Nexus, JFrog) into developer workflows and manage complex dependency lifecycles
• Ensure build artifacts are properly verified, signed, and compliant with federal requirements
• Facilitate cross-functional collaboration to maintain security without slowing innovation
• Act as a strategic security partner who understands the realities of shipping code in federal environments

Here’s what you need:

• 3+ years of hands‑on software engineering and application/infrastructure security experience
• Proven experience securing CI/CD pipelines and delivering production‑quality code

Technical proficiency:

• Deep expertise with build systems such as Gradle, Maven, Docker, and Kubernetes
• Strong CI/CD orchestration skills using GitLab CI/CD and Jenkins
• Hands‑on experience with artifact signing (Sigstore/Cosign)
• Experience generating and analyzing SBOMs (CycloneDX or SPDX)
• Strong understanding of modern AppSec principles, including SSDF
• Expertise in threat modeling, secrets management (HashiCorp Vault), and container hardening

Preferred qualifications:

• Experience automating compliance mapping pipeline controls to federal frameworks (NIST 800-53, FedRAMP, SSDF)
• Professional certifications such as CSSLP, CISSP, or CCSP

Eligibility Requirement:

US Citizen required

Eligible to obtain a government public trust clearance

As required by local law, Accenture Federal Services provides reasonable ranges of compensation for hired roles based on labor costs in the states of California, Colorado, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Vermont, Virginia, Washington, and the District of Columbia, and the city of Cleveland . The base pay range for this position in these locations is shown below. Compensation for roles at Accenture Federal Services varies depending on a wide array of factors, including but not limited to office location, role, skill set, and level of experience. Accenture Federal Services offers a wide variety of benefits. You can find more information on benefits here. We accept applications on an on-going basis and there is no fixed deadline to apply.

The pay range for the states of California, Colorado, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Vermont, Virginia, Washington, and the District of Columbia, and the city of Cleveland is:

$78,600 - $160,200 USD

What We Believe

As a company wholly dedicated to serving the US federal government, we bring together the best talent to help reinvent