ZipRecruiter

Log In

1

Application Security Engineer Jobs in Virginia (NOW HIRING)

next page

Showing results 1-20

All JobsApplication Security Engineer JobsApplication Security Engineer Jobs in Virginia

Application Security Engineer information

See Virginia salary details

$29

$65

$95

How much do application security engineer jobs pay per hour?

As of Jun 12, 2026, the average hourly pay for application security engineer in Virginia is $65.83, according to ZipRecruiter salary data. Most workers in this role earn between $56.01 and $74.86 per hour, depending on experience, location, and employer.

What Does an Application Security Engineer Do?

An application security engineer is responsible for ensuring the secure function of software application programs. For this career, you must have advanced training in cybersecurity and familiarity with multiple computer programming languages. Your main job duty is to evaluate lines of programming code to make sure a given application is safe from cyber-attack. You perform penetration testing to see if outside sources can "hack" into the application. You also do threat modeling and security code reviews of programming done by other application programmers.

What are some common challenges faced by Application Security Engineers when integrating security into the software development lifecycle?

Application Security Engineers often encounter challenges such as balancing security requirements with development speed, ensuring all team members understand secure coding practices, and keeping up with evolving threats. They frequently work closely with developers, DevOps, and QA teams to embed security controls without disrupting workflows. Overcoming these challenges requires strong communication skills, a deep understanding of both security and software development, and the ability to advocate for security as a shared responsibility across the organization.

What does an Application Security Engineer do?

An Application Security Engineer is responsible for identifying and mitigating security vulnerabilities in software applications throughout their development lifecycle. They work closely with developers to ensure secure coding practices, conduct security assessments and code reviews, and implement tools for threat detection and prevention. Their primary goal is to protect applications from threats such as data breaches, unauthorized access, and other forms of cyber attacks. They also stay updated on the latest security trends and compliance requirements to keep applications safe.

What are the key skills and qualifications needed to thrive as an Application Security Engineer, and why are they important?

To thrive as an Application Security Engineer, you need a solid background in software development, cybersecurity fundamentals, and vulnerability assessment, often supported by a degree in computer science or a related field. Familiarity with tools such as static and dynamic application security testing (SAST/DAST), penetration testing frameworks, and relevant certifications like CISSP or CEH is common. Attention to detail, problem-solving abilities, and strong communication skills help you effectively identify risks and collaborate with development teams. These skills are crucial for safeguarding applications against evolving threats and ensuring secure software delivery.

What is the difference between Application Security Engineer vs Security Analyst?

AspectApplication Security EngineerSecurity Analyst
CertificationsCEH, CISSP, OSCPCISSP, Security+
Work EnvironmentDevelops security measures, reviews code, tests applicationsMonitors security systems, investigates incidents, analyzes threats
Industry UsageTech companies, software firms, organizations with strong app focusBroad sectors including finance, healthcare, government

Application Security Engineers focus on securing software applications through code review, vulnerability testing, and implementing security measures. Security Analysts monitor and analyze security threats, respond to incidents, and maintain security systems. While both roles require security certifications and work in security-focused environments, Application Security Engineers are more involved in the development and testing of secure applications, whereas Security Analysts focus on threat detection and incident response.

More about Application Security Engineer jobs
What are the most commonly searched types of Application Security Engineer jobs in Virginia? The most popular types of Application Security Engineer jobs in Virginia are:
What are popular job titles related to Application Security Engineer jobs in Virginia? For Application Security Engineer jobs in Virginia, the most frequently searched job titles are:
What job categories do people searching Application Security Engineer jobs in Virginia look for? The top searched job categories for Application Security Engineer jobs in Virginia are:
What cities in Virginia are hiring for Application Security Engineer jobs? Cities in Virginia with the most Application Security Engineer job openings:
What are popular job titles related to Application Security Engineer jobs in VA? For Application Security Engineer jobs in VA, the most frequently searched job titles are:
Application Security Engineer jobs near you
Cyber Oracle Cloud Security - Consultant / Security Engineer II

Cyber Oracle Cloud Security - Consultant / Security Engineer II

Deloitte

Richmond, VA • On-site

Other

Posted 22 days ago

Deloitte rating

8.1

Company rating: 8.1 out of 10

Based on 86 frontline employees who took The Breakroom Quiz

58th of 138 rated financial services

Job description

Cyber Oracle Cloud Security - Consultant / Security Engineer II

Deloitte's Cyber team helps organizations address complex cybersecurity challenges while supporting resilient, secure growth. In this role, you will support Oracle Cloud security engagements focused on application security, governance, risk, and compliance across Enterprise Resource Planning (ERP), Human Capital Management (HCM), and Supply Chain Management (SCM) environments. You will work with clients to assess risks, design controls, and implement security solutions that strengthen business processes and cloud operations.

Recruiting for this role ends on 12/31/2026.

Work you'll do

As a Security Engineer II on the Cyber Enterprise Security team, you will be responsible for supporting Oracle Cloud security and controls engagements across client environments.

  • Support the assessment, design, and implementation of application security for Oracle Cloud ERP, HCM, SCM, and business process controls environments
  • Participate in security design workshops and help translate business and technical requirements into Oracle Cloud security configurations
  • Design and configure Oracle Cloud roles across functional areas, including Financials, SCM, HCM, and Enterprise Performance Management (EPM)
  • Support the design and implementation of automated controls and governance, risk, and compliance solutions, including Oracle Risk Management Cloud
  • Identify business process risks and control considerations and contribute to security-focused implementation and assessment activities

A successful candidate would possess these skills:

  • Ability to work independently and collaborate as part of a team
  • Effective written and verbal communication skills
  • Meticulous attention to detail and quality of work product
  • Ability to build and sustain professional relationships
  • Ability to lead projects or workstreams
  • Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
  • Strong interpersonal skills and professional demeanor
  • Ability to meet deadlines
  • Ability to provide clear guidance to others

The team

Our Enterprise Security Offering helps clients embed security across digital transformation efforts by securing core technology environments while enabling business change. The team works across security architecture, secure development and deployment, cloud security, application security, and emerging technology risks. Professionals in this practice help organizations strengthen security capabilities while supporting large-scale transformation programs.

Qualifications

Required:

  • Bachelor of Arts or Bachelor of Science degree in Computer Science, Cyber Security, Information Security, Engineering, Information Technology, Management Information Systems, Finance, Accounting and Technology, or Business
  • 2+ years of experience on large, complex projects with multiple country or regional rollouts, including support for security design workshops
  • 2+ years of experience designing Oracle Cloud roles across Oracle Cloud Financials, Supply Chain Management, Human Capital Management, or Enterprise Performance Management
  • 2+ years of experience with business process risk and controls design
  • 2+ years of experience designing, configuring, and implementing Oracle Risk Management Cloud
  • Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
  • Limited immigration sponsorship may be available.

Preferred:

  • Experience in consulting or Big 4 environments
  • Certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA)
  • Experience supporting end-to-end Oracle Cloud security and controls implementations across ERP, HCM, SCM, or EPM
  • Experience with Oracle Cloud Infrastructure (OCI) security
  • Experience with Segregation of Duties (SOD), personally identifiable information (PII), and Sarbanes-Oxley (SOX) control frameworks
  • Experience with Single Sign-On (SSO), Multi-Factor Authentication (MFA), Oracle Identity Cloud Service (IDCS), or data protection tools

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $82,600 to $162,800.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

Qualifications:

Cyber Oracle Cloud Security - Consultant / Security Engineer II

Deloitte's Cyber team helps organizations address complex cybersecurity challenges while supporting resilient, secure growth. In this role, you will support Oracle Cloud security engagements focused on application security, governance, risk, and compliance across Enterprise Resource Planning (ERP), Human Capital Management (HCM), and Supply Chain Management (SCM) environments. You will work with clients to assess risks, design controls, and implement security solutions that strengthen business processes and cloud operations.

Recruiting for this role ends on 12/31/2026.

Work you'll do

As a Security Engineer II on the Cyber Enterprise Security team, you will be responsible for supporting Oracle Cloud security and controls engagements across client environments.

  • Support the assessment, design, and implementation of application security for Oracle Cloud ERP, HCM, SCM, and business process controls environments
  • Participate in security design workshops and help translate business and technical requirements into Oracle Cloud security configurations
  • Design and configure Oracle Cloud roles across functional areas, including Financials, SCM, HCM, and Enterprise Performance Management (EPM)
  • Support the design and implementation of automated controls and governance, risk, and compliance solutions, including Oracle Risk Management Cloud
  • Identify business process risks and control considerations and contribute to security-focused implementation and assessment activities

A successful candidate would possess these skills:

  • Ability to work independently and collaborate as part of a team
  • Effective written and verbal communication skills
  • Meticulous attention to detail and quality of work product
  • Ability to build and sustain professional relationships
  • Ability to lead projects or workstreams
  • Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
  • Strong interpersonal skills and professional demeanor
  • Ability to meet deadlines
  • Ability to provide clear guidance to others

The team

Our Enterprise Security Offering helps clients embed security across digital transformation efforts by securing core technology environments while enabling business change. The team works across security architecture, secure development and deployment, cloud security, application security, and emerging technology risks. Professionals in this practice help organizations strengthen security capabilities while supporting large-scale transformation programs.

Qualifications

Required:

  • Bachelor of Arts or Bachelor of Science degree in Computer Science, Cyber Security, Information Security, Engineering, Information Technology, Management Information Systems, Finance, Accounting and Technology, or Business
  • 2+ years of experience on large, complex projects with multiple country or regional rollouts, including support for security design workshops
  • 2+ years of experience designing Oracle Cloud roles across Oracle Cloud Financials, Supply Chain Management, Human Capital Management, or Enterprise Performance Management
  • 2+ years of experience with business process risk and controls design
  • 2+ years of experience designing, configuring, and implementing Oracle Risk Management Cloud
  • Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
  • Limited immigration sponsorship may be available.

Preferred:

  • Experience in consulting or Big 4 environments
  • Certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA)
  • Experience supporting end-to-end Oracle Cloud security and controls implementations across ERP, HCM, SCM, or EPM
  • Experience with Oracle Cloud Infrastructure (OCI) security
  • Experience with Segregation of Duties (SOD), personally identifiable information (PII), and Sarbanes-Oxley (SOX) control frameworks
  • Experience with Single Sign-On (SSO), Multi-Factor Authentication (MFA), Oracle Identity Cloud Service (IDCS), or data protection tools

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $82,600 to $162,800.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

Education:Bachelor's DegreeEmployment Type:

What Deloitte employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply