Lead AppSec Engineer: Secure AI & DevOps Pipelines

Accenture Federal Services; Washington (District of Columbia); On-site; USD 110,000 - 224,000; Full time

Job summary

Accenture Federal Services seeks a Senior Application Security Engineer to partner with development teams and ensure secure, scalable software delivery across federal programs. You will lead the AppSec scrum team, integrate security into the lifecycle, test web and AI applications, and shape secure CI/CD pipelines with GitLab, Jenkins, SBOMs and artifact signing.

This role requires hands-on coding, experience with Gradle/Maven, Docker/Kubernetes, Snyk/Nexus/JFrog, and balancing security with

Qualifications

• 6+ years in software engineering and application/infrastructure security with hands-on production coding.
• Proven experience securing CI/CD pipelines.
• Foundational understanding with one or more build systems (Gradle, Maven, Docker/Kubernetes).
• Experience with SBOM formats (CycloneDX, SPDX).
• Strong understanding of AppSec principles, SSDF, threat modeling, and secrets management.

Responsibilities

• Lead the AppSec scrum team and all agile ceremonies.
• Test and triage security vulnerabilities for web and AI applications.
• Architect and maintain secure CI/CD pipelines (GitLab, Jenkins) and SBOM management.
• Lead shift-left threat modeling and address risks early.
• Integrate security tools into developer workflows (Snyk, Nexus, JFrog).

Skills

Software engineering

Application security

CI/CD security

Threat modeling

Build tools

SBOM formats

AppSec principles

Secrets management

AI security

Team leadership

Tools

GitLab

Jenkins

Snyk

Nexus

JFrog

Gradle

Maven

Docker

Kubernetes

CycloneDX

SPDX

Sigstore/Cosign

Job description

Accenture Federal Services seeks a Senior Application Security Engineer to partner with development teams and ensure secure, scalable software delivery across federal programs. You will lead the AppSec scrum team, integrate security into the lifecycle, test web and AI applications, and shape secure CI/CD pipelines with GitLab, Jenkins, SBOMs and artifact signing.

This role requires hands-on coding, experience with Gradle/Maven, Docker/Kubernetes, Snyk/Nexus/JFrog, and balancing security with