Application Security Engineer — Vulnerability Remediation

Concept Solutions, LLC; Reston (VA); Hybrid; USD 130,000 - 150,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

401(k) plan

Job summary

Concept Solutions, LLC (CS) is seeking an Application Security Engineer to support a mission-critical modernization program for a DoW customer. The role focuses on strengthening security by remediating vulnerabilities, supporting continuous monitoring, and guiding secure coding practices across production Java and Go applications.

You will collaborate with ISSE and development squads, maintain POA&Ms, and ensure secure operations within a hybrid work setup in Reston, VA with US remote locations.

Qualifications

• 4+ years of experience in application security, secure software engineering, or a closely related discipline.
• Hands-on experience identifying and remediating security vulnerabilities in Java or Go applications.
• Experience addressing security findings within production software environments.
• Active Secret security clearance.
• Familiarity with STIGs.

Responsibilities

• Identify and remediate security findings across existing production applications, including dependency vulnerabilities, container vulnerabilities, STIG compliance issues, and code-level findings identified through security scans and assessments.
• Maintain accurate and current Plans of Action and Milestones (POA&Ms) for the application portfolio, tracking security findings and remediation progress.
• Collaborate with the Information System Security Engineer (ISSE) to develop and maintain application security evidence supporting continuous monitoring requirements.
• Partner with software development squads to implement secure coding fixes and address vulnerabilities in application codebases.
• Support ongoing application security improvements while ensuring the continued operation and sustainment of production applications.

Skills

Java

Go

Application security

Tools

Syft

Grype

Job description

Concept Solutions, LLC (CS) is seeking an Application Security Engineer to support a mission-critical modernization program for a DoW customer. The role focuses on strengthening security by remediating vulnerabilities, supporting continuous monitoring, and guiding secure coding practices across production Java and Go applications.

You will collaborate with ISSE and development squads, maintain POA&Ms, and ensure secure operations within a hybrid work setup in Reston, VA with US remote locations.