Application Security Engineer: Cloud & DevSecOps (Onsite)

conceptplus; Reston (VA); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Paid time off

Bonuses

Tuition reimbursement

Unlimited training

Job summary

Concept Plus is seeking an experienced Application Security Engineer for a fully onsite role in Reston, VA. You will join a team delivering a cloud-native platform with end-to-end budget traceability and integrate security across the SDLC.

You will collaborate with data, cloud, and security engineers to design, build, assess, and sustain secure mission applications, leveraging OCI and containerized technologies in a DevSecOps environment.

Qualifications

• US Citizen required.
• Must hold TS/SCI clearance with Polygraph.
• 8+ years in application security, DevSecOps, or related cybersecurity.
• Experience integrating security across SDLC, including design reviews, threat modeling, secure code review, and remediation.
• Experience with Python, JavaScript, SQL, Shell, PL/SQL, and secure coding practices.
• Familiarity with SAST/DAST/SCA, secrets scanning, and container/security scanning.
• Experience building secure cloud-native apps with Kubernetes, containers, REST APIs, and CI/CD pipelines.
• Knowledge of security frameworks such as NIST RMF, OWASP, DISA STIGs.
• Experience securing Oracle RDBMS environments.

Responsibilities

• Deliver secure software solutions as part of a Data, Cloud, and Security team.
• Integrate security throughout the software development lifecycle with developers and cloud engineers.
• Design, build, assess, and secure mission applications in Oracle Cloud environments.
• Lead secure design reviews, threat modeling, and secure code reviews.
• Support release authorization and remediation efforts across projects.

Skills

Application security

Secure SDLC

DevSecOps

Cloud security

Kubernetes

Docker

REST APIs

CI/CD

Threat modeling

SAST/DAST/SCA

OCI

Secure coding

NIST/OWASP

Education

Bachelor’s degree in engineering or computer science

Master’s degree preferred

Tools

Oracle Cloud Infrastructure (OCI)

Kubernetes

Docker

CI/CD pipelines

Job description

Concept Plus is seeking an experienced Application Security Engineer for a fully onsite role in Reston, VA. You will join a team delivering a cloud-native platform with end-to-end budget traceability and integrate security across the SDLC.

You will collaborate with data, cloud, and security engineers to design, build, assess, and sustain secure mission applications, leveraging OCI and containerized technologies in a DevSecOps environment.