Senior Application Security Engineer (Hybrid)

VeriSign, Inc.; Reston, Northern (VA, KY); Hybrid; USD 164,000 - 222,000; Full time

Job summary

VeriSign, Inc. in Reston, VA is seeking a Senior Application Security Engineer to lead security across all software, collaborating with development teams and external partners to bake security into design, testing, and production.

You will drive threat modeling, manage the vulnerability program, mentor staff, and help shape security standards while working in a hybrid Reston office environment.

Qualifications

• 10+ years in IT with hands-on application development experience.
• Proven experience conducting application security assessments using Burp Suite, Fortify or equivalent.
• Experience running vulnerability management programs with SLA reporting.
• Strong knowledge of the OWASP Top 10 and secure SDLC practices.

Responsibilities

• Lead application security assessments during requirements, design and architecture phases.
• Perform deep-dive vulnerability assessments and guide remediation.
• Own the vulnerability management lifecycle across toolchain (SCA, SAST/DAST, secrets).
• Review Bug Bounty submissions and track issues to SLAs.
• Guide security testing integration into CI/CD pipelines.
• Mentor engineers and contribute to security standards.

Skills

Application security

Vulnerability management

Security assessments

OWASP Top 10

CI/CD security

AI security

Tools

Burp Suite

Fortify

SCA tooling

DAST tools

Secrets scanning

Job description

VeriSign, Inc. in Reston, VA is seeking a Senior Application Security Engineer to lead security across all software, collaborating with development teams and external partners to bake security into design, testing, and production.

You will drive threat modeling, manage the vulnerability program, mentor staff, and help shape security standards while working in a hybrid Reston office environment.