Hybrid App Security Engineer: Vulnerability Remediation

Cybersecurity Jobs; Reston (VA); Hybrid; USD 130,000 - 150,000; Full time

Benefits offered by this job

Health insurance

Life insurance

401(k)

Job summary

CONCEPT SOLUTIONS LLC is supporting a mission-critical application modernization program for a Department of War customer, focusing on remediation of security findings in production across an application portfolio. You will drive fixes with development teams and align security documentation to continuous monitoring needs.

The role requires 4+ years in application security or secure software engineering, with hands-on experience in Java or Go apps, production environments, and familiarity with

Qualifications

• 4+ years of experience in application security, secure software engineering, or a closely related discipline.
• Hands-on experience identifying and remediating security vulnerabilities in Java or Go applications.
• Experience addressing security findings within production software environments.

Responsibilities

• Identify and remediate security findings across existing production applications, including dependency vulnerabilities, container vulnerabilities, STIG compliance issues, and code-level findings from security scans and assessments.
• Maintain accurate and current Plans of Action and Milestones (POA&Ms) for the application portfolio, tracking security findings and remediation progress.
• Collaborate with the Information System Security Engineer (ISSE) to develop and maintain application security evidence for continuous monitoring requirements.
• Work with software development squads to implement secure coding fixes and address vulnerabilities in application codebases.
• Support ongoing application security improvements while ensuring continued operation and sustainment of production applications.

Skills

Application security

Java

Go (Golang)

Syft

Grype

Tools

Java

Go (Golang)

Syft

Grype

Job description

CONCEPT SOLUTIONS LLC is supporting a mission-critical application modernization program for a Department of War customer, focusing on remediation of security findings in production across an application portfolio. You will drive fixes with development teams and align security documentation to continuous monitoring needs.

The role requires 4+ years in application security or secure software engineering, with hands-on experience in Java or Go apps, production environments, and familiarity with