Application Security Engineer - Vulnerability Remediation

Concept-Solution; Reston (VA); Hybrid; USD 130,000 - 150,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

401(k) with employer matching

Job summary

Concept Solutions, LLC in Reston, VA is seeking an Application Security Engineer to support an modernization program for a DoW customer. You will identify and remediate vulnerabilities, support continuous monitoring, and work with development teams to promote secure coding practices.

You will strengthen security across mission-critical federal applications and collaborate with ISSE for evidence and continuous monitoring.

Qualifications

• 4+ years of experience in application security, secure software engineering, or a closely related discipline.
• Hands-on experience identifying and remediating security vulnerabilities in Java or Go applications.
• Experience addressing security findings within production software environments.
• Active Secret security clearance.

Responsibilities

• Identify and remediate security findings across existing production applications, including dependency vulnerabilities, container vulnerabilities, STIG compliance issues, and code-level findings identified through security scans and assessments.
• Maintain accurate and current Plans of Action and Milestones (POA&Ms) for the application portfolio, tracking security findings and remediation progress.
• Collaborate with the Information System Security Engineer (ISSE) to develop and maintain application security evidence supporting continuous monitoring requirements.
• Partner with software development squads to implement secure coding fixes and address vulnerabilities in application codebases.
• Support ongoing application security improvements while ensuring the continued operation and sustainment of production applications.

Skills

Application security

Secure software engineering

Java

Go

Security clearance

Production environments

Tools

Syft

Grype

Job description

Concept Solutions, LLC in Reston, VA is seeking an Application Security Engineer to support an modernization program for a DoW customer. You will identify and remediate vulnerabilities, support continuous monitoring, and work with development teams to promote secure coding practices.

You will strengthen security across mission-critical federal applications and collaborate with ISSE for evidence and continuous monitoring.