Application Security Engineer
Listed on 2026-09-15
-
IT/Tech
Cybersecurity, Information Security & Data Protection, IT Consultant
Job Title:
Application Security Engineer Shift/Hours/Days:
Hybrid, 2 days onsite, 40 hours per week, Salem, VA Client Profile
Our client is seeking an experienced Application Security Engineer to support ongoing application security and technology initiatives. This is a long term contract opportunity with potential eligibility for future conversion.
Key ResponsibilitiesSecure Microsoft Azure development environments, including projects, resource groups, hosting, identity and access, pipelines, configurations, and security controls.
Partner with development and IT teams to integrate application security into software development, build, deployment, and release processes.
Support Dev Sec Ops processes and help ensure development teams follow required application security standards and procedures.
Coordinate application security assessments and testing, including SAST, DAST, software composition analysis, and penetration testing, often with third party partners.
Identify, prioritize, track, remediate, and validate application vulnerabilities, security weaknesses, and process gaps.
Evaluate third party applications, software components, open source dependencies, and AI integrations for security risk.
Maintain assessment records, remediation status, exceptions, and supporting documentation for governance, audit, and continuous improvement.
What You’ll Bring7 years of experience in application security, cybersecurity, software development, or a related discipline.
Bachelor’s degree in a related technical field, or equivalent education and work experience.
Experience with Microsoft Azure development environments and application security controls.
Strong understanding of the software development lifecycle and Dev Sec Ops . Coding is not required, but you must understand how applications are developed, built, and deployed.
Experience with application security testing, vulnerability assessment, penetration testing, or security remediation.
Ability to work effectively with development teams, application owners, security partners, suppliers, and third party providers.
Knowledge of application security frameworks and standards such as NIST SP 800 171, CRA, or SOC 2 is preferred.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).