Application Security Engineer – Software Vulnerability Remediation

Concept Solutions, LLC (CS) is seeking an Application Security Engineer to support a mission-critical application modernization program for a Department of War (DoW) customer.

This program will modernize and streamline access across a portfolio of production applications, creating a unified platform with single sign-on, a common user interface, and a repeatable approach to integrating applications—all while maintaining and supporting existing systems.

In this role, you will help strengthen application security by identifying and remediating vulnerabilities, supporting continuous monitoring activities, and collaborating with software development teams to implement secure coding practices.

This is an opportunity to contribute directly to the security and reliability of mission-critical federal applications.

• Identify and remediate security findings across existing production applications, including dependency vulnerabilities, container vulnerabilities, STIG compliance issues, and code-level findings identified through security scans and assessments.
• Maintain accurate and current Plans of Action and Milestones (POA&Ms) for the application portfolio, tracking security findings and remediation progress.
• Collaborate with the Information System Security Engineer (ISSE) to develop and maintain application security evidence supporting continuous monitoring requirements.
• Partner with software development squads to implement secure coding fixes and address vulnerabilities in application codebases.
• Support ongoing application security improvements while ensuring the continued operation and sustainment of production applications.

• 4+ years of experience in application security, secure software engineering, or a closely related discipline.
• Hands-on experience identifying and remediating security vulnerabilities in Java or Go (Golang) applications.
• Experience addressing security findings within production software environments.
• Active Secret security clearance.

• Experience using software vulnerability scanning tools such as Syft, Grype, or similar technologies.
• Familiarity with Security Technical Implementation Guides (STIGs).

• Location:
  
  Hybrid. Reston, VA headquarters and approved remote locations within the United States, with on-site work at Government facilities in Northern Virginia and Maryland as required. Government-furnished equipment is used for all access to Government environments.
• Schedule:
  
  Full-time, 40 hours per week, Monday through Friday, with core hours of 9:00 a.m. to 3:00 p.m. Eastern. Work is organized into two-week sprints, with a customer demonstration each sprint.
• Travel: 0–10%, within the Washington, DC metropolitan area.
• Security Requirement: U.S. citizenship required. Must be eligible to obtain and maintain a DoW security clearance. An active Secret clearance or higher
• Compensation: $130,000–$150,000 annually, depending on experience.

Founded in 1999 and headquartered in Reston, Virginia, Concept Solutions, LLC (CS) is a leading small business in technology, engineering, and management consulting. We are the innovative and agile force behind strategic solutions that enhance organizational efficiency and safeguard our nation across Aerospace, Defense, and National Security sectors.

For over 25 years, CS has been a trusted partner for the Federal Aviation Administration (FAA), Department of Homeland Security (DHS), Department of Justice (DOJ), Department of Defense (DoD) and other federal agencies delivering vital IT, security, and project management services.

Our commitment to excellence is reflected in our adherence to CMMI-DEV ML3, ISO 9001:2015, ISO/IEC 20000-1:2018, and ISO/IEC 27001-1:2013 standards. CS…