Application Security Engineer

Leidos

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Ashburn, VA
Salary
$107,900–$195,050 / yr
Employment
Full-time
Posted
106 days ago
Freshness
Confirmed live today

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $176k
This role $151k
$96k $221k
below market most similar roles pay here above market

This role pays less than 62% of similar roles. Most pay $142,487–$208,800 — the blue band above. At the midpoint, this role pays about $151k versus about $176k for comparable roles.

Based on 240 similar postings.

Employer

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.

Leidos currently has 426 open roles on FindRole.

Listed pay typically runs $92,300–$166,850 across 344 roles with salary data.

Most-posted roles

View all roles at Leidos

At a glance

TL;DR · Application Security Engineer

JOB TITLE: Application Security Engineer The Application Security Engineer joins the Customs and Border Protection Cyber Security Directorate Security Operations Center to support application security operations, configuration management, and vulnerability management. This role involves continuous monitoring of managed applications, implementing alerting systems, and integrating security best practices into the software development life cycle. Key responsibilities include developing and deploying Machine Learning and Artificial Intelligence tools, utilizing SAST tools to analyze source code, and conducting security assessments using Microfocus WebInspect and other DAST tools. The engineer will manage container security using Anchore, tune logging capabilities, and ensure compliance with Security Technical Implementation Guides. Required skills include experience with SAST, SCA, DAST, secure coding practices, and scripting. The work focuses on protecting enterprise-wide information systems, including networks, cloud environments, and mobile devices from cyber threats.

What you'll do

  • Monitor all managed applications and implement an alerting system for critical security incidents.
  • Integrate security best practices into the software development life cycle from design to deployment.
  • Use SAST tools to analyze source code for vulnerabilities and work with teams to remediate issues.
  • Conduct security assessments using Microfocus WebInspect and other DAST tools to address dynamic findings.
  • Implement and manage container security tools like Anchore to ensure secure deployments and orchestration.
  • Maintain the basis for control and status accounting of application systems and their configuration items.
  • Tune logging capabilities for efficiency and recommend new technologies for application logging.
  • Execute the Vulnerability Identification and Remediation process for applications in support of the Service Desk.

What we're looking for

  • BS degree in Information Technology, Software Engineering, or a related field.
  • 8–12 years of prior relevant experience.
  • 3+ years of prior experience in application security with a focus on SAST, SCA, and DAST.
  • Knowledge of secure coding practices and integration into the SDLC.
  • Familiarity with common security frameworks and standards.
  • Strong programming/scripting skills and excellent communication and collaboration skills.
  • Experience working in an Agile project management environment.
  • Must have a Top Secret Clearance with SCI.

More like this

Similar roles

Application Security Engineer

State Street

Quincy, MA +4 60 days ago
DevSecOps AppSec CI/CD SAST DAST SCA Python Java .Net Node.js AWS Azure Kubernetes Terraform Ansible Infrastructure as Code Agile API Security Container Security SSDLC
6+ yrs exp

Application Security Engineer

Opendoor

Miami 131 days ago
Python Go TypeScript Ruby Terraform AWS GCP Azure Kubernetes Apollo GraphQL GraphQL GitHub Advanced Security CodeQL Semgrep HackerOne Burp Suite Cloudflare WAF Claude OpenAI Threat Modeling REST gRPC Mobile Security
Hybrid

Application Security Engineer

Booz Allen Hamilton

Fort Meade, MD +8 42 days ago $99,000–$225,000
Zero Trust Palo Alto Versa Cisco Fortinet Juniper TLS mTLS PKI F5 Nginx A10 NetScaler DMZ Office 365 NIST 800-53 FIPS DoD STIG FedRAMP

Application Security Engineer

Booz Allen Hamilton

Fort Meade, MD +8 53 days ago
F5 BIG-IP AWS TLS mTLS PKI Cryptography Linux UNIX SSH RDP NIST 800-53 FIPS DoD STIG FedRAMP Networking Protocols

Application Security Engineer

Booz Allen Hamilton

Fort Meade, MD +8 53 days ago
Next-Generation Firewalls NGFW Palo Alto Fortinet Juniper Versa SD-WAN TLS mTLS PKI Linux UNIX NIST 800-53 FIPS DoD STIG FedRAMP Office 365 Networking Protocols

Application Security Engineer

Booz Allen Hamilton

Colorado Springs, CO +1 37 days ago
F5 BIG-IP LTM APM ASM VMware NSX-T SD-WAN TLS mTLS PKI Linux UNIX NIST 800-53 FIPS DoD STIG FedRAMP SSH CLI RDP