Programming Language

Programming Language Cybersecurity Jobs

4 jobs found

Today

Senior Application Security Engineer

MBL Technologies Washington, DC

Washington, DC

Today

Full time Backend Developer Senior Application Security

Apply Now

Job Description

MBL Technologies is seeking a Senior Application Security Engineer (Veracode) to strengthen its application security team and help keep highly visible applications protected. This onsite role in Washington, DC supports a resilient security posture through collaboration with client and application stakeholders. In addition to a strong mission focus, the position comes with a comprehensive package including health coverage, time off, professional development support, and incentive opportunities.

Responsibilities

Collaborate with the client and the application community to maintain a resilient security posture for highly visible applications.

Requirements

6+ years of information technology experience.
3+ years supporting Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and IDE plug-in environments using Burp Suite.
1+ year supporting SAST, DAST, and IDE plug-in environments using Veracode.
2+ years experience with Java, Python, .NET, or C#.
3+ years designing and implementing enterprise-wide security controls to secure applications, systems, network, or infrastructure services.
Experience with Eclipse, JDeveloper (including pipeline development), or Visual Studio.
Experience securing enterprise web applications and working with OWASP Top 10, CVSS, CWE, WASC, and SANS-25.
Knowledge of federal compliance standards, including NIST 800-53, FIPS, or FedRAMP.
2+ years working in Linux based environments, including navigating and troubleshooting basic website connectivity issues.
Ability to obtain a security clearance.
IT-related Bachelor’s Degree.
Experience with Interactive Application Security Testing (IAST) capabilities and tools.
Experience with HackerOne.
Experience with Selenium.
Experience writing bash scripts.
Experience with OWASP ZAP or Burp Proxy.

Benefits

Robust benefits package: medical, dental, vision, STD, accident, life, hospital insurance, FSA, HSA
401K match and 401K
Professional development stipend and learning and development reimbursement
Competitive salary adjusted for candidate qualifications
Incentive plans with corporate and individual performance bonuses
PTO
Remote work
Health and wellness programs
Employee discounts
Community Service and Employee Engagement events

MOS Codes: 170A, 170D, 17A, 17B, 17C, 17D, 24B, 25B, 47D, 94F, IT, 17 5309, 6203, 9735, 9740, 9890, 9891

View full job page →

1mo ago

Cybersecurity Software Developer

CACI Chantilly, VA

Chantilly, VA

1mo ago Closed

$87k - $182k/yr Full time Backend Developer Application Security Cloud Platforms

This position is no longer accepting applications (closed Sep 19, 2026).

Job Description

Build and support cybersecurity-focused software capabilities for client data integrity and usability in an Agile environment.

Responsibilities

Participate in daily scrum meetings
Troubleshoot complex problems and assist customers with application and system issues
Use programming skills to automate and improve efficiency of client applications
Work independently while collaborating effectively within a development team
Support existing production systems and adapt to new technologies as required

Requirements

Bachelor's degree in Computer Science or related field
TS/SCI with required polygraph clearance (minimum clearance required to start)
Minimum 5+ years of experience in software design and development
3 years of experience developing applications in Python
Demonstrated experience designing, implementing, or supporting REST API services
Demonstrated experience with relational databases such as MySQL, PostgreSQL, or similar
Demonstrated experience upgrading, maintaining, and refining existing production applications, including legacy codebase
Experience developing and deploying Docker containers

Technologies

Python
REST API services
MySQL, PostgreSQL
Docker
Django, FastAPI, Flask
JavaScript, React, Angular, jQuery/Ajax
Windows, Linux
Cloud-based environments and services
GitLab, Jenkins

Desired

Familiarity with ETL/ELT workflows, data pipelines, or backend data processing systems
Experience with Python web frameworks such as Django, FastAPI, Flask, or similar
Experience developing Python SDKs, client libraries, or developer-consumable integrations
Experience with JavaScript-based web applications or front-end technologies such as React, Angular, jQuery/Ajax, or similar frameworks
Experience developing and supporting applications in Windows and Linux environments
Familiarity with cloud-based environments and services
Experience using DevOps tools such as GitLab, Jenkins, or similar platforms in a development workflow

Travel

Up to 10% travel
Continental US

Benefits

Flexible time off benefit
Prepaid courses to nationally recognized certification courses
Paid cyber events and training, such as Capture the Flag Events
Robust learning resources
Comprehensive benefits including healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits

Opportunity

Part of a large development team creating and maintaining applications focused on improving the integrity and usability of a client’s data
Uses Agile methodology
Self-starter mindset and willingness to dive into new technologies when appropriate

Location: Chantilly, VA (onsite)

Salary Range: USD 86,600 - 181,800 per yearly

Pay Range: $86,600 - $181,800

View full job page →

1mo ago

Senior Penetration Tester

Schellman Remote 🌍 Remote

Remote

1mo ago Closed

Full time Senior Cybersecurity Tools Data Security

This position is no longer accepting applications (closed Sep 18, 2026).

Job Description

Schellman is hiring a Senior Penetration Tester to support hands-on penetration testing engagements across on-premise and cloud-based networks and applications. In this remote role, you will execute testing procedures, perform analysis, and deliver well-documented results while strengthening your technical skills through mentorship, collaboration, and client-focused delivery.

Role summary

This position emphasizes structured skill development and high-quality client outcomes. You will contribute to practice development and thought leadership while establishing strong working relationships with client personnel throughout the engagement lifecycle.

Key responsibilities

Comply with Schellman’s code of ethics and professional conduct, methodologies, and applicable policies and procedures
Meet professional and regulatory standards relevant to assigned service line specialization(s)
Support Schellman’s company culture and model Schellman values
Build high-quality client relationships and rapport with client personnel
Manage client expectations to help ensure outcomes exceed expectations
Complete assigned duties on time with strong attention to detail
Collaborate with project team members across the full project lifecycle and keep work aligned with schedules
Escalate internal issues in a proper and timely manner
Use discretion and decorum in the timing, form, and content of client communications
Book travel reservations in a timely manner in accordance with Schellman travel and expense policies
When qualified and called upon, perform the essential functions of other service delivery positions
Attend project kick-off and closing meetings
Execute assigned testing procedures, analyze findings, reach conclusions, document results per company standards, and suggest improvements when applicable
Draft project deliverables
Serve as a contact for clients’ basic engagement questions
Participate in recruiting and candidate interview activities
Train project team members and acclimate newer team members
Contribute to Schellman practice development and develop expert knowledge of professional and regulatory standards relevant to the specialization(s)
Contribute to Schellman thought leadership (for example, articles, webinars, or public speaking)

Required qualifications

Bachelor’s degree in technology, computer science, or another relevant subject area, or equivalent years of experience related to the duties and responsibilities
3+ years of hands-on penetration testing experience
1+ year experience in web application penetration testing
Strong ability to work independently, with teams, and with clients
Offensive Security Certified Professional (OSCP) (Required)
Requisite knowledge of applicable technology and security domains
High attention to detail and quality of work product
Client service orientation
Excellent time management, organizational, and verbal and written communication skills
Ability to work on-site or remotely as a valuable contributor to a collaborative team
Capacity to manage tasks across multiple projects simultaneously
Proficiency using Microsoft Word, Excel, and PowerPoint, and Schellman service delivery applications
Full understanding and application of ethics, independence, and Schellman values
Proficiency with at least two scripting languages (for example, Python, Bash, JavaScript, PowerShell)
Demonstrated enthusiasm for information security (for example: GitHub repo, blogs, presentations, conference talks, local security association membership, or participation in free skill-building or hacking challenges such as SANS Holiday Hack, HackerOne CTF, or HackTheBox)
Competency in common operating systems (for example, Windows, macOS, Linux)
Understanding of cloud computing models, technologies, and concepts

Technologies and tools

OSCP, CRTO
Burp Suite
Python, Bash, JavaScript, PowerShell
Microsoft Word, Microsoft Excel, Microsoft PowerPoint
Windows, macOS, Linux
GitHub
SANS Holiday Hack, HackerOne CTF, HackTheBox

Remote work and travel

Opportunity to work remotely unless otherwise stated in the job requirements
Some travel annually, which can include in-person training, team meet-ups, and strategy meetings
Service Delivery team members may travel based on business and client needs

View full job page →

2mo ago

Lead Application Security Engineer

Carter's Atlanta, GA

Atlanta, GA

2mo ago Closed

Full time Senior Api Security Application Security

This position is no longer accepting applications (closed Aug 17, 2026).

Job Description

What Carter's offers

This onsite leadership role places you at the helm of the enterprise AppSec program from a cybersecurity standpoint, with hands-on responsibilities in AI security. Based in Atlanta, GA, you will collaborate closely with engineering leadership to embed security into system design and SDLC processes, driving measurable improvements in risk reduction and security maturity. The position provides a clear path to influence architecture decisions, security tooling, and governance across the organization, while representing IT Security in audits and cross-functional planning.

Responsibilities

Define and own the enterprise application security architecture, standards, and secure-by-default patterns
Establish and maintain the AppSec tooling strategy, assess vendors, and champion adoption across engineering teams
Lead threat modeling sessions for critical applications and new product features
Serve as the final technical authority on AppSec decisions, including security design reviews and architecture signoffs
Oversee advanced secure code reviews, SAST/DAST assessments, and manual penetration testing across web, mobile, and API surfaces
Own API security standards for REST and GraphQL, enforcing OWASP API Top 10 controls and authentication/authorization design patterns
Drive vulnerability triage, risk prioritization, and remediation accountability across development teams at scale
Own the DevSecOps toolchain, designing, deploying, and maturing security gates within enterprise CI/CD pipelines
Partner with engineering leadership to embed security into system design, SDLC processes, and platform decisions
Continuously improve AppSec metrics, dashboards, and KPIs to demonstrate program maturity and risk reduction
Hands-on development and deployment of AI-powered security tooling and automation, such as AI-assisted code review or threat detection
Secure AI/ML integrations and connectors by assessing prompt injection, data leakage, model supply chain, and third‑party risks
Develop and enforce AI governance policies, defining acceptable use, security review gates, and risk acceptance criteria
Represent the IT Security team in architecture reviews, cross-functional planning, and executive risk reporting
Maintain security policy and standards documentation relevant to application security, AI use, and API governance
Lead AppSec representation in PCI DSS, NIST, and OWASP compliance audits and evidence collection

Requirements

5+ years in application security, software engineering, or secure code review
Strong proficiency in one or more languages such as Python, Java, JavaScript, or Go, with capability for deep code review and threat modeling
Experience with SAST/DAST tooling (Snyk, SonarQube, Semgrep, Checkmarx, Burp Suite, OWASP ZAP) and ownership of AppSec program design
Effective communicator with the ability to present to multilevel stakeholders
Demonstrated ability to meet deadlines and collaborate with management across disciplines
Proven collaboration with cross-functional teams
Willingness to perform on-call duties during off-hours and holidays
Adaptable and flexible attitude toward changing business needs
Bachelor's degree in computer science or a related field
Experience leading or conducting red team, penetration testing, or adversarial simulations
Experience designing and scaling security observability pipelines, including log analysis and application-layer telemetry
Working knowledge of PCI-DSS, NIST, OWASP, and other frameworks; experience representing security in audits
Proven track record securing cloud-native or hybrid-cloud environments (AWS, Azure, or GCP)
Hands-on experience building, deploying, or integrating AI/ML tools, with ability to assess and govern their security posture (prompt injection, data leakage, model supply chain risks)
Ability to define and enforce security standards across engineering organizations; prior experience owning a security capability or domain
Security certifications such as Security+, ISC2 CC, CompTIA A+, CompTIA Network+, SSCP, CCT, GWEB, CSSLP, CEH, or OSCP

Technologies

Python
Java
JavaScript
Go
Snyk
SonarQube
Semgrep
Checkmarx
Burp Suite
OWASP ZAP
REST
GraphQL
AWS
Azure
GCP
PCI-DSS
NIST
OWASP

Travel

Open to travel between Carter's offices as needed

View full job page →

Programming Language Cybersecurity Jobs

Senior Application Security Engineer

Cybersecurity Software Developer

Senior Penetration Tester

Lead Application Security Engineer

Get Programming Language Cybersecurity Jobs alerts