Application Security Operations Specialist

Cybersecurity Jobs; Washington (District of Columbia); On-site; USD 90,000 - 130,000; Full time

Job summary

Cybersecurity Jobs in Washington, DC seeks a hands-on security professional to own operational execution and continuous improvement of application security scanning and verification across the organization. You will run automated and custom scan routines, support AI testing harnesses, and coordinate with remediation teams to close findings.

Ideal candidates have 3+ years with tool integration, strong vulnerability management knowledge, and scripting skills in Python/PowerShell/Bash, with Windows

Qualifications

• 3+ years experience driving and/or supporting tool integration with workflow platforms (example: ServiceNow).
• Strong understanding of vulnerability management concepts and terminology.
• Excellent prioritization, communication, and mentoring skills.
• Familiarity with MITRE ATT&CK, cloud-based scanning, and compliance frameworks (NIST, FFIEC).
• Hands-on scripting experience with Python, PowerShell, Bash.
• Background in Windows and UNIX administration.

Responsibilities

• Run automated and custom scan routines to detect application and source code vulnerabilities.
• Provide operational support for new frontier AI models and related testing harnesses.
• Support event and result handling, including triage, resolution, FP determination, and closure with partners.
• Participate in incident response activities and contribute information to remediation teams.
• Assist application teams with understanding and resolving security findings.
• Contribute to the development and implementation of application security technology strategy.
• Conduct proof-of-concept testing for next-generation scanning technologies.
• Optimize scanning platforms and improve resiliency through operational process improvements.
• Identify and map vulnerability detection gaps to appropriate technology solutions.
• Perform data and trend analysis to inform harness development and vulnerability management lessons learned.

Skills

Tool integration

Vulnerability management

Prioritization

Communication

Mentoring

Education

Bachelor's or Master's in IT/Cybersecurity

Tools

ServiceNow

MITRE ATT&CK

NIST

FFIEC

Python

PowerShell

Bash

Windows

UNIX

Job description

Own operational execution and continuous improvement of application security scanning and verification across the organization.

Responsibilities

• Run automated and custom scan routines to detect application and source code vulnerabilities.
• Provide operational support for new frontier AI models and related testing harnesses.
• Support event and result handling, including identification, triage, resolution, false positive determination, verification, and closure in coordination with partners and Enterprise Remediation Governance.
• Participate in incident response activities and contribute relevant information to improve collaboration with control owners and remediation teams.
• Assist application teams with understanding and resolving security findings.
• Contribute to the development and implementation of application security technology strategy.
• Conduct proof-of-concept testing for next-generation scanning technologies.
• Optimize scanning platforms and improve resiliency through operational process improvements.
• Identify and map vulnerability detection gaps to appropriate technology solutions.
• Perform data and trend analysis to inform harness development and vulnerability management lessons learned.

Requirements

• 3+ years experience driving and/or supporting tool integration with workflow platforms (example: ServiceNow).
• Strong understanding of vulnerability management concepts and terminology.
• Excellent prioritization, communication, and mentoring skills.

Technologies

• ServiceNow
• MITRE ATT&CK
• NIST
• FFIEC
• Python, PowerShell, Bash
• Windows, UNIX

Desired Qualifications

• BS/MS in Information Technology, Cybersecurity, or a related field.
• Familiarity with MITRE ATT&CK, cloud-based scanning, and compliance frameworks (example: NIST, FFIEC).
• Experience with vulnerability rating methodologies.
• Background in Windows and UNIX administration.
• Proficiency with scripting languages (example: Python, PowerShell, Bash).
• Hands-on experience with AI-assisted vulnerability identification activities.

• Location: Washington, DC (onsite)
• Shift: 1st shift (United States of America)
• Hours: 40 hours per week