Application Security Engineer TS/SCI Poly - Cloud DevSecOps

Worky; Reston (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

Concept Plus is seeking an experienced Application Security Engineer for a fully onsite contract in Reston, VA. You will join a team delivering a cloud-native platform that provides end-to-end budget traceability and integrate security throughout the software development lifecycle.

You will partner with developers and cloud engineers to design, build, assess, and sustain secure mission applications, implementing DevSecOps practices, threat modeling, code reviews, and security testing within

Qualifications

• US Citizen is required.
• Must possess a TS/SCI security clearance with Polygraph.
• Technical expertise in application security, secure software development, DevSecOps, for Oracle Cloud and mission challenges.
• Experience integrating security across the SDLC: design reviews, threat modeling, secure code review, testing, remediation, release authorization.

Responsibilities

• Integrate security throughout the software development lifecycle.
• Partner with developers and cloud engineers to design, build, assess, and sustain secure mission applications.
• Deliver cloud-native security through OCI and other cloud services.
• Perform threat modeling, secure design reviews, and secure code reviews.
• Support security testing, remediation, and release authorization processes.

Skills

US citizen

TS/SCI with Polygraph

Application security

Secure SDLC

Python

JavaScript

SQL

Shell scripting

PL/SQL

SAST/DAST/SCA

CI/CD pipelines

Kubernetes

Docker

REST APIs

DevSecOps

OCI security

NIST/OWASP/DISA

Oracle RDBMS security

Education

Bachelor’s degree in engineering, CS or related

Master’s degree preferred

Tools

Kubernetes

Docker

REST APIs

CI/CD

Job description

Concept Plus is seeking an experienced Application Security Engineer for a fully onsite contract in Reston, VA. You will join a team delivering a cloud-native platform that provides end-to-end budget traceability and integrate security throughout the software development lifecycle.

You will partner with developers and cloud engineers to design, build, assess, and sustain secure mission applications, implementing DevSecOps practices, threat modeling, code reviews, and security testing within