Senior AppSec Engineer: Secure AI & DevOps Pipelines

Accenture-Federal-Services-2; Washington (District of Columbia); On-site; USD 110,000 - 224,000; Full time

Job summary

Accenture Federal Services is seeking a Senior Application Security Engineer to partner with development teams and embed security into the software lifecycle. This role leads the AppSec scrum team and drives secure practices across CI/CD, SBOM management, and threat modeling for web and AI applications.

You will guide security across engineering, operations, and development, ensuring compliance with SSDF and federal requirements while leveraging AI to optimize workflows.

Qualifications

• 6+ years in software engineering and security (hands-on coding).
• Foundational understanding of Gradle, Maven, Docker/Kubernetes.
• Experience with SBOM formats CycloneDX, SPDX.
• Strong AppSec, SSDF, threat modeling and secrets management.
• Eligible to obtain a Public Trust clearance.
• Experience with artifact signing (Sigstore/Cosign).

Responsibilities

• Lead the AppSec scrum team and all agile ceremonies.
• Prioritize the security backlog and guide best practices.
• Drive collaboration across security, development, and operations.
• Use AI tools to improve workflows and efficiency.
• Test and triage vulnerabilities for web and AI applications.
• Provide remediation guidance and maintain secure CI/CD pipelines.
• Architect and manage SBOMs and secure supply chain practices.
• Lead shift-left threat modeling with engineers.
• Integrate security tools into developer workflows.
• Balance security with delivery velocity in a federal environment.

Skills

AppSec

Threat modeling

CI/CD security

SBOM formats

Build tools Gradle Maven Docker/K8s

Artifact signing

Tools

Snyk

Nexus

JFrog

Job description

Accenture Federal Services is seeking a Senior Application Security Engineer to partner with development teams and embed security into the software lifecycle. This role leads the AppSec scrum team and drives secure practices across CI/CD, SBOM management, and threat modeling for web and AI applications.

You will guide security across engineering, operations, and development, ensuring compliance with SSDF and federal requirements while leveraging AI to optimize workflows.