Application Security Engineer – Software Vulnerability Remediation

Concept Solutions, LLC; Reston (VA); Hybrid; USD 130,000 - 150,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

401(k) plan

Job summary

Concept Solutions, LLC (CS) is seeking an Application Security Engineer to support a mission-critical modernization program for a DoW customer. The role focuses on strengthening security by remediating vulnerabilities, supporting continuous monitoring, and guiding secure coding practices across production Java and Go applications.

You will collaborate with ISSE and development squads, maintain POA&Ms, and ensure secure operations within a hybrid work setup in Reston, VA with US remote locations.

Qualifications

• 4+ years of experience in application security, secure software engineering, or a closely related discipline.
• Hands-on experience identifying and remediating security vulnerabilities in Java or Go applications.
• Experience addressing security findings within production software environments.
• Active Secret security clearance.
• Familiarity with STIGs.

Responsibilities

• Identify and remediate security findings across existing production applications, including dependency vulnerabilities, container vulnerabilities, STIG compliance issues, and code-level findings identified through security scans and assessments.
• Maintain accurate and current Plans of Action and Milestones (POA&Ms) for the application portfolio, tracking security findings and remediation progress.
• Collaborate with the Information System Security Engineer (ISSE) to develop and maintain application security evidence supporting continuous monitoring requirements.
• Partner with software development squads to implement secure coding fixes and address vulnerabilities in application codebases.
• Support ongoing application security improvements while ensuring the continued operation and sustainment of production applications.

Skills

Java

Go

Application security

Tools

Syft

Grype

Job description

Concept Solutions, LLC (CS) is seeking an Application Security Engineer to support a mission-critical application modernization program for a Department of War (DoW) customer.

This program will modernize and streamline access across a portfolio of production applications, creating a unified platform with single sign-on, a common user interface, and a repeatable approach to integrating applications—all while maintaining and supporting existing systems.

In this role, you will help strengthen application security by identifying and remediating vulnerabilities, supporting continuous monitoring activities, and collaborating with software development teams to implement secure coding practices.

This is an opportunity to contribute directly to the security and reliability of mission-critical federal applications.

• Identify and remediate security findings across existing production applications, including dependency vulnerabilities, container vulnerabilities, STIG compliance issues, and code-level findings identified through security scans and assessments.
• Maintain accurate and current Plans of Action and Milestones (POA&Ms) for the application portfolio, tracking security findings and remediation progress.
• Collaborate with the Information System Security Engineer (ISSE) to develop and maintain application security evidence supporting continuous monitoring requirements.
• Partner with software development squads to implement secure coding fixes and address vulnerabilities in application codebases.
• Support ongoing application security improvements while ensuring the continued operation and sustainment of production applications.

What we're looking for

• 4+ years of experience in application security, secure software engineering, or a closely related discipline.
• Hands-on experience identifying and remediating security vulnerabilities in Java or Go (Golang) applications.
• Experience addressing security findings within production software environments.

Preferred Qualifications

• Experience using software vulnerability scanning tools such as Syft, Grype, or similar technologies.
• Familiarity with Security Technical Implementation Guides (STIGs).
• Active Secret security clearance.

Work Location and Schedule

• Location: Hybrid. Reston, VA headquarters and approved remote locations within the United States, with on-site work at Government facilities in Northern Virginia and Maryland as required. Government-furnished equipment is used for all access to Government environments.
• Schedule: Full-time, 40 hours per week, Monday through Friday, with core hours of 9:00 a.m. to 3:00 p.m. Eastern. Work is organized into two-week sprints, with a customer demonstration each sprint.
• Travel: 0–10%, within the Washington, DC metropolitan area.
• Security Requirement: U.S. citizenship required. Must be eligible to obtain and maintain a DoW security clearance. An active Secret clearance or higher is strongly preferred and may allow an earlier start.
• Compensation: $130,000–$150,000 annually, depending on experience.

This position is contingent upon contract award, with an anticipated start in October 2026.

Company Profile:

Founded in 1999 and headquartered in Reston, Virginia, Concept Solutions, LLC (CS) is a leading small business in technology, engineering, and management consulting. We are the innovative and agile force behind strategic solutions that enhance organizational efficiency and safeguard our nation across Aerospace, Defense, and National Security sectors.

For over 25 years, CS has been a trusted partner for the Federal Aviation Administration (FAA), Department of Homeland Security (DHS), Department of Justice (DOJ), Department of Defense (DoD) and other federal agencies delivering vital IT, security, and project management services.

Our commitment to excellence is reflected in our adherence to CMMI-DEV ML3, ISO 9001:2015, ISO/IEC 20000-1:2018, and ISO/IEC 27001-1:2013 standards. CS boasts company highlights that include:

• Over two decades of experience across over $300 million in contract awards supporting critical FAA programs
• Multiple contract vehicles providing opportunities across FAA, DoD, NOAA, and other Federal agencies
• Innovation Council - CS maintains an active Internal Research and Development (IR&D) program that is geared towards identifying emerging technologies and pursuing technological innovations

At CS, we know our success stems from our talented team. That’s why we prioritize the wellbeing and growth of our employees, fostering a positive culture centered on innovation, engagement, and career development.

Benefits: Concept Solutions offers a competitive benefits and salary package you would receive from a large company. We offer health, dental, vision and life insurance, as well as a comprehensive 401(k) plan with matching and immediate vesting.

Concept Solutions is an Equal Opportunity Employer, and we value workplace diversity. We invite resumes from all interested parties and consider applicants for all positions without regard to race, color, religion, sex, national origin, age, marital status, sexual preference, personal appearance, family responsibility, the presence of a non-job-related medical condition or physical disability, matriculation, political affiliation, veteran status or any other legally protected status. Concept Solutions is a VEVRAA federal contractor, and we request priority referral of veterans for available positions.