Application Security Engineer

Acclaim Technical Services is hiring an Application Security Engineer for an onsite role in Reston, VA focused on end-to-end budget traceability for a cloud-native, centralized platform.

Responsibilities

• Integrate security throughout the software development lifecycle by partnering with developers and cloud engineers to design, build, assess, and sustain secure mission applications.
• Lead secure design and architecture reviews, threat modeling, secure code review, security testing, vulnerability remediation, and release authorization support.
• Develop or review applications using Python, JavaScript frameworks, SQL, Shell scripting, PL/SQL, and other programming languages with strong secure coding practices.
• Execute application security testing using SAST, DAST, SCA, secrets scanning, and container or infrastructure vulnerability scanning.
• Build and secure cloud-native applications and services using Kubernetes, containers, Docker, REST APIs, and CI/CD pipelines.
• Implement DevSecOps practices by adding automated security controls and testing into build and deployment pipelines.
• Assess, prioritize, document, and communicate application and cloud security risks, findings, and remediation recommendations to both technical and non-technical stakeholders.

Requirements

• Hands-on expertise in application security, secure software development, software engineering, or DevSecOps, applied to Oracle Cloud and customer mission challenges.
• Experience integrating security across the SDLC, including secure design/architecture reviews, threat modeling, secure code review, security testing, vulnerability remediation, and release authorization support.
• Experience developing or reviewing applications with Python, JavaScript frameworks, SQL, Shell scripting, PL/SQL, and other programming languages.
• Experience with application security testing tools and processes: SAST, DAST, SCA, secrets scanning, and container/infrastructure vulnerability scanning.
• Experience building and securing cloud-native applications and services using Kubernetes, containers, Docker, REST APIs, and CI/CD pipelines.
• Experience implementing DevSecOps practices with automated security controls and testing in build/deployment pipelines.
• Experience with cloud-native security services and controls; Oracle Cloud Infrastructure (OCI) experience is desired.
• Knowledge of security frameworks and standards including NIST RMF, NIST Secure Software Development Framework, OWASP, DISA STIGs, and applicable federal security requirements.
• Experience securing Oracle RDBMS environments, including database access controls, encryption, auditing, and secure handling of sensitive data.
• Ability to assess, prioritize, document, and communicate application and cloud security risks and remediation recommendations to technical and non-technical stakeholders.
• Passion for technology and willingness to continuously learn new security tools, techniques, and approaches for complex technical problems.
• Experience working in an Agile framework.
• 8+ years of relevant experience in application security, software engineering, DevSecOps, cybersecurity, or a related technical discipline.
• Bachelor’s Degree in engineering, computer science, or related technical discipline; Master’s degree preferred.

Technologies

• Oracle Cloud, Oracle Cloud Infrastructure (OCI)
• Python, JavaScript frameworks
• SQL, Shell scripting, PL/SQL
• Static application security testing (SAST)
• Dynamic application security testing (DAST)
• Software composition analysis (SCA)
• Secrets scanning, container vulnerability scanning, infrastructure vulnerability scanning
• Kubernetes, containers, Docker
• REST APIs, CI/CD pipelines
• DevSecOps practices
• NIST RMF, NIST Secure Software Development Framework, OWASP, DISA STIGs
• Oracle RDBMS, encryption, auditing

Desired Skills and Qualifications

• OCI IaaS and/or PaaS certifications are preferred.
• Security certifications such as CISSP, CSSLP, Security+, GIAC, CEH, OSCP, or comparable credentials.
• Experience implementing identity and access management, privileged access controls, secrets management, encryption, logging, monitoring, and incident response capabilities in cloud environments.
• Experience with AI technologies for software development and securing AI-enabled applications or development workflows.
• Data engineering experience, including securing data validations, business rules, data transformations, and sensitive-data handling.

Salary Range

• $210,000 - $260,000 per year (USD)