Senior AppSec Engineer - Full Scope Poly, Cloud & DevSecOps

Concept Plus; Reston (VA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Paid time off

11 paid holidays

Performance bonuses

Tuition reimbursement

Unlimited training

Job summary

Concept Plus in Fairfax, VA is hiring an Application Security Engineer (Full Scope Poly) to join a cloud-native security team on a critical DoD-focused contract in Reston, VA. The role emphasizes integrating security across the SDLC, partnering with data, cloud, and security engineers to secure mission applications and modernize defenses.

You will apply SAST/DAST, container security, and CI/CD security controls within OCI and Kubernetes environments, while communicating risks to technical and

Qualifications

• 8+ years of experience in application security, DevSecOps, or related fields.
• TS/SCI security clearance with Polygraph required.
• Experience with secure SDLC, threat modeling, and security testing.
• Proficiency with SAST, DAST, SCA, secrets scanning, and container security.
• Experience building cloud-native apps on OCI, Kubernetes, Docker, REST APIs, and CI/CD.
• Familiarity with NIST RMF, NIST Secure SDLC, OWASP, DISA STIGs.
• Bachelor's degree; master's preferred.

Responsibilities

• Integrate security across the software development lifecycle with developers and cloud engineers.
• Design, build, assess, and sustain secure mission applications.
• Evaluate and communicate security risks to technical and non-technical stakeholders.
• Support release authorization and vulnerability remediation.

Skills

Application security

DevSecOps

Cloud security

Kubernetes

Docker

SAST

DAST

Threat modeling

CI/CD pipelines

NIST RMF

OWASP

RDBMS security

Education

Bachelor's degree in engineering or computer science

Master's degree preferred

Tools

Kubernetes

Docker

OCI

Job description

Concept Plus in Fairfax, VA is hiring an Application Security Engineer (Full Scope Poly) to join a cloud-native security team on a critical DoD-focused contract in Reston, VA. The role emphasizes integrating security across the SDLC, partnering with data, cloud, and security engineers to secure mission applications and modernize defenses.

You will apply SAST/DAST, container security, and CI/CD security controls within OCI and Kubernetes environments, while communicating risks to technical and