Onsite TS/SCI Poly: Application Security Engineer

Concept Plus, LLC; Reston, Northern (VA, KY); Hybrid; USD 140,000 - 170,000; Full time

Benefits offered by this job

Health insurance

Paid time off

Tuition reimbursement

11 paid holidays

Performance bonuses

Job summary

Concept Plus is seeking an experienced Application Security Engineer for a full-time, on-site role in Reston, VA. You will integrate security across the software development lifecycle and partner with developers and cloud engineers to design, build, and sustain secure mission applications.

Required qualifications include a TS/SCI clearance with polygraph, hands-on experience in application security, secure SDLC, and cloud-native environments.

Qualifications

• Must possess a TS/SCI security clearance with Polygraph.
• Experience in application security, secure software development, DevSecOps, and cloud-native environments.
• Experience with secure SDLC activities and threat modeling.
• Familiar with SAST/DAST/SCA tools and cloud security controls.
• Strong background in Kubernetes, Docker, REST APIs, and CI/CD pipelines.

Responsibilities

• Integrate security across the software development lifecycle.
• Collaborate with developers and cloud engineers to secure mission applications.
• Assess and communicate security risks to technical and non-technical stakeholders.

Skills

TS/SCI clearance

DevSecOps

Threat modeling

Secure SDLC

Cloud security

Education

Bachelor's degree in engineering or computer science

Master's degree preferred

Tools

Kubernetes

Docker

REST APIs

CI/CD pipelines

OCI

SAST/DAST/SCA tools

Job description

Concept Plus is seeking an experienced Application Security Engineer for a full-time, on-site role in Reston, VA. You will integrate security across the software development lifecycle and partner with developers and cloud engineers to design, build, and sustain secure mission applications.

Required qualifications include a TS/SCI clearance with polygraph, hands-on experience in application security, secure SDLC, and cloud-native environments.