AppSec Engineer – Secure SDLC & DoD

Talentify; O'Fallon (IL); On-site; USD 75,000 - 158,000; Full time

Job summary

CACI is seeking an Application Security Engineer to embed security into the software development lifecycle in support of a DoD mission. You will work with developers and architects to identify, validate, and remediate vulnerabilities across diverse applications.

You will perform SAST/DAST, conduct secure code reviews, and lead penetration testing engagements while ensuring DoD requirements are met. Expect collaboration across architecture, GRC, and operations teams in a growing program.

Qualifications

• 3–5 years of experience in application security, secure development, or penetration testing.
• Hands‑on experience with SAST platforms (Fortify preferred).
• Working knowledge of OWASP Top 10 and common application vulnerability classes.
• DoD 8140.03M DCWF Basic Tier — CEH.
• DoD 8140 Interim Education Options; Required travel to Scott Air Force Base quarterly.

Responsibilities

• Embed robust security practices into the secure SDLC from design through deployment.
• Execute static (SAST) and dynamic (DAST) application security testing using enterprise tooling.
• Lead and support penetration testing engagements, guiding developers through remediation.
• Coordinate with cybersecurity program teams (architecture, GRC, operations).
• Grow expertise across AppSec spectrum: code review, runtime testing, and compliance validation.

Skills

Application security

Secure SDLC

Penetration testing

SAST/DAST

OWASP Top 10

Cybersecurity

Education

Bachelor’s degree in Computer Science or related field

DoD 8140.03M DCWF Basic Tier — CEH

DoD 8140 Interim Education Options

Tools

Fortify

SonarQube

Job description

CACI is seeking an Application Security Engineer to embed security into the software development lifecycle in support of a DoD mission. You will work with developers and architects to identify, validate, and remediate vulnerabilities across diverse applications.

You will perform SAST/DAST, conduct secure code reviews, and lead penetration testing engagements while ensuring DoD requirements are met. Expect collaboration across architecture, GRC, and operations teams in a growing program.