Application Security Engineer

Acclaim Technical Services is hiring an Application Security Engineer for an onsite role in Reston, VA focused on end-to-end budget traceability for a cloud-native, centralized platform.

• Integrate security throughout the software development lifecycle by partnering with developers and cloud engineers to design, build, assess, and sustain secure mission applications.
• Lead secure design and architecture reviews, threat modeling, secure code review, security testing, vulnerability remediation, and release authorization support.
• Develop or review applications using Python
  , JavaScript frameworks
  , SQL
  , Shell scripting
  , PL/SQL
  , and other programming languages with strong secure coding practices.
• Execute application security testing using SAST
  , DAST
  , SCA
  , secrets scanning
  , and container or infrastructure vulnerability scanning
  .
• Build and secure cloud-native applications and services using Kubernetes
  , containers
  , Docker
  , REST APIs
  , and CI/CD pipelines
  .
• Implement Dev Sec Ops  practices by adding automated security controls and testing into build and deployment pipelines.
• Assess, prioritize, document, and communicate application and cloud security risks, findings, and remediation recommendations to both technical and non-technical stakeholders.

• Hands-on expertise in application security, secure software development, software engineering, or Dev Sec Ops , applied to Oracle Cloud and customer mission challenges.
• Experience integrating security across the SDLC, including secure design/architecture reviews, threat modeling, secure code review, security testing, vulnerability remediation, and release authorization support.
• Experience developing or reviewing applications with Python
  , JavaScript frameworks
  , SQL
  , Shell scripting
  , PL/SQL
  , and other programming languages.
• Experience with application security testing tools and processes:
  SAST
  , DAST
  , SCA
  , secrets scanning
  , and container/infrastructure vulnerability scanning.
• Experience building and securing cloud-native applications and services using Kubernetes
  , containers
  , Docker
  , REST APIs
  , and CI/CD pipelines
  .
• Experience implementing Dev Sec Ops  practices with automated security controls and testing in build/deployment pipelines.
• Experience with cloud-native security services and controls;
  Oracle Cloud Infrastructure (OCI) experience is desired.
• Knowledge of security frameworks and standards including NIST RMF
  , NIST Secure Software Development Framework
  , OWASP
  , DISA STIGs
  , and applicable federal security requirements.
• Experience securing Oracle RDBMS environments, including database access controls, encryption, auditing, and secure handling of sensitive data.
• Ability to assess, prioritize, document, and communicate application and cloud security risks and remediation recommendations to technical and non-technical stakeholders.
• Passion for technology and willingness to continuously learn new security tools, techniques, and approaches for complex technical problems.
• Experience working in an Agile framework.
• 8+ years of relevant experience in application security, software engineering, Dev Sec Ops , cybersecurity, or a related technical discipline.
• Bachelor’s Degree in engineering, computer science, or related technical discipline;
  Master’s degree preferred
  .

• Oracle Cloud, Oracle Cloud Infrastructure (OCI)
• Python, JavaScript frameworks
• SQL, Shell scripting, PL/SQL
• Static application security testing (SAST)
• Dynamic application security testing (DAST)
• Software composition analysis (SCA)
• Secrets scanning, container vulnerability scanning, infrastructure vulnerability scanning
• Kubernetes, containers, Docker
• REST APIs, CI/CD pipelines
• Dev Sec Ops  practices
• NIST RMF, NIST Secure Software Development Framework, OWASP, DISA STIGs
• Oracle RDBMS, encryption, auditing

• OCI IaaS and/or PaaS certifications are preferred.
• Security certifications such as CISSP, CSSLP, Security+, GIAC, CEH, OSCP, or comparable credentials.
• Experience implementing identity and access management, privileged access controls, secrets management, encryption, logging, monitoring, and incident response capabilities in cloud environments.
• Experience with AI technologies for software development and securing AI-enabled applications or development workflows.
• Data engineering experience, including securing data validations, business rules, data transformations, and sensitive-data handling.

• $210,000 - $260,000 per year (USD)