ZipRecruiter

Log In

1

Application Security Engineer Jobs in Washington

Eliassen Group

Application Security Engineer

Washington, DC · On-site

$66.50 - $89/hr

Work with application developers ensure adoption of security principals and best practices. 6. Provides direction and support in security management and security architecture standards and ...

Hirekeyz Inc

APPLICATION SECURITY ENGINEER

Fairfax, VA · On-site

$60 - $80.25/hr

Application Security Engineer Location: Onsite in Fairfax, VA 3 days and in Washington, DC 2 days per week. Duration: Long Term Contract Positions Require a Secret Clearance The Application Security ...

Comtech, LLC

Application Security Engineer

Washington, DC

$66.50 - $89/hr

Application Security Engineer Location: Washington, DC * Support PeopleSoft HCM/FSCM/ELM/CRM/EPM application security. * Implement specifically SSO for Oracle ELM, HCM and Finance PeopleSoft Modules ...

Virtru

Application Security Engineer

Washington, DC

$180K - $200K/yr

As an application security engineer you will help our engineering teams maintain and develop our product, and directly have impact in a security centric company and product. An ideal candidate is ...

Leidos

Application Security Engineer

Ashburn, VA

$107K - $195K/yr

Primary Responsibilities Leidos is looking for an Application Security Engineer to support: Application Security Operations and Maintenance, Application Security Configuration Management and ...

Leidos

Application Security Engineer

Ashburn, VA · On-site

$107K - $195K/yr

Primary Responsibilities Leidos is looking for an Application Security Engineer to support: Application Security Operations and Maintenance, Application Security Configuration Management and ...

Leidos

Application Security Engineer

Ashburn, VA · On-site

$107K - $195K/yr

Primary Responsibilities Leidos is looking for an Application Security Engineer to support: Application Security Operations and Maintenance, Application Security Configuration Management and ...

next page

Showing results 1-20

All JobsApplication Security Engineer JobsApplication Security Engineer Jobs in Washington

Application Security Engineer information

See Washington salary details

$33

$75

$109

How much do application security engineer jobs pay per hour?

As of Jul 26, 2026, the average hourly pay for application security engineer in Washington is $75.21, according to ZipRecruiter salary data. Most workers in this role earn between $63.99 and $85.48 per hour, depending on experience, location, and employer.

What Does an Application Security Engineer Do?

An application security engineer is responsible for ensuring the secure function of software application programs. For this career, you must have advanced training in cybersecurity and familiarity with multiple computer programming languages. Your main job duty is to evaluate lines of programming code to make sure a given application is safe from cyber-attack. You perform penetration testing to see if outside sources can "hack" into the application. You also do threat modeling and security code reviews of programming done by other application programmers.

What are some common challenges faced by Application Security Engineers when integrating security into the software development lifecycle?

Application Security Engineers often encounter challenges such as balancing security requirements with development speed, ensuring all team members understand secure coding practices, and keeping up with evolving threats. They frequently work closely with developers, DevOps, and QA teams to embed security controls without disrupting workflows. Overcoming these challenges requires strong communication skills, a deep understanding of both security and software development, and the ability to advocate for security as a shared responsibility across the organization.

What does an Application Security Engineer do?

An Application Security Engineer is responsible for identifying and mitigating security vulnerabilities in software applications throughout their development lifecycle. They work closely with developers to ensure secure coding practices, conduct security assessments and code reviews, and implement tools for threat detection and prevention. Their primary goal is to protect applications from threats such as data breaches, unauthorized access, and other forms of cyber attacks. They also stay updated on the latest security trends and compliance requirements to keep applications safe.

What are the key skills and qualifications needed to thrive as an Application Security Engineer, and why are they important?

To thrive as an Application Security Engineer, you need a solid background in software development, cybersecurity fundamentals, and vulnerability assessment, often supported by a degree in computer science or a related field. Familiarity with tools such as static and dynamic application security testing (SAST/DAST), penetration testing frameworks, and relevant certifications like CISSP or CEH is common. Attention to detail, problem-solving abilities, and strong communication skills help you effectively identify risks and collaborate with development teams. These skills are crucial for safeguarding applications against evolving threats and ensuring secure software delivery.

What is the difference between Application Security Engineer vs Security Analyst?

AspectApplication Security EngineerSecurity Analyst
CertificationsCEH, CISSP, OSCPCISSP, Security+
Work EnvironmentDevelops security measures, reviews code, tests applicationsMonitors security systems, investigates incidents, analyzes threats
Industry UsageTech companies, software firms, organizations with strong app focusBroad sectors including finance, healthcare, government

Application Security Engineers focus on securing software applications through code review, vulnerability testing, and implementing security measures. Security Analysts monitor and analyze security threats, respond to incidents, and maintain security systems. While both roles require security certifications and work in security-focused environments, Application Security Engineers are more involved in the development and testing of secure applications, whereas Security Analysts focus on threat detection and incident response.

More about Application Security Engineer jobs
What are the most commonly searched types of Application Security Engineer jobs in Washington? The most popular types of Application Security Engineer jobs in Washington are:
What are popular job titles related to Application Security Engineer jobs in Washington? For Application Security Engineer jobs in Washington, the most frequently searched job titles are:
What job categories do people searching Application Security Engineer jobs in Washington look for? The top searched job categories for Application Security Engineer jobs in Washington are:
What cities in Washington are hiring for Application Security Engineer jobs? Cities in Washington with the most Application Security Engineer job openings:
What are popular job titles related to Application Security Engineer jobs in WA? For Application Security Engineer jobs in WA, the most frequently searched job titles are:
Application Security Engineer jobs near you
Infographic showing various Application Security Engineer job openings in Washington as of July 2026, with employment types broken down into 78% Full Time, 16% Part Time, 1% Temporary, and 5% Contract. Highlights an 93% Physical, 2% Hybrid, and 5% Remote job distribution, with an average salary of $156,430 per year, or $75.2 per hour.
Application Security Engineer

Application Security Engineer

ConsultNet Technology Services and Solutions

Rockville, MD • On-site

$60 - $80/hr

Full-time

Posted 23 days ago

Job description

Job Summary:
ConsultNet Technology Services and Solutions is a premier national provider of technology talent and solutions. They are seeking a Senior Application Security Engineer responsible for designing, implementing, and advancing application security practices across the Software Development Life Cycle (SDLC), partnering closely with engineering, DevOps, and security teams.
Responsibilities:
• Perform application security assessments, manual penetration testing, and vulnerability validation using tools such as Burp Suite and other proxy/security testing tools.
• Analyze and triage findings from SAST, DAST, IAST, IaC, and secrets detection tools to identify, prioritize, and support remediation of security vulnerabilities.
• Partner with engineering teams to integrate security controls and testing into CI/CD pipelines in support of DevSecOps initiatives.
• Conduct secure code reviews and leverage GenAI-enabled security tooling to improve scalability and efficiency of application security analysis.
• Evaluate, recommend, and implement application security tools and technologies, including emerging capabilities related to automated code analysis and cloud security.
• Perform AWS configuration and cloud security reviews to ensure adherence to security best practices and compliance standards.
• Develop and maintain documentation related to security findings, remediation activities, risk assessments, and compliance requirements.
• Contribute to the development, interpretation, and enforcement of application security policies, standards, and procedures.
• Support enterprise security compliance initiatives and participate in audit and risk management activities.
• Deliver security awareness training and educate developers and QA engineers on common application security risks, secure coding practices, and remediation techniques.
• Stay current on emerging threats, vulnerabilities, attack techniques, and security technologies to continuously improve the organization's security posture.
Qualifications:
Required:
• Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or a related technical field.
• 5+ years of experience in cybersecurity with a strong focus on application security.
• Hands-on experience with SAST, DAST, IAST, and related application security testing methodologies and tools.
• Strong understanding of OWASP Top 10 vulnerabilities, secure coding principles, and remediation strategies.
• Experience performing manual penetration testing and application vulnerability assessments.
• Proficiency in one or more programming or scripting languages such as Java, Python, or JavaScript.
• Experience integrating security tooling into CI/CD pipelines using platforms such as Jenkins and GitLab.
• Strong knowledge of security engineering concepts including authentication, authorization, cryptography, network security, and secure application architecture.
• Experience with AWS cloud security concepts, services, and configuration reviews.
• Excellent communication skills with the ability to collaborate effectively across engineering and security teams.
Preferred:
• Background in software engineering or application development.
• Familiarity with GenAI-assisted security tooling and automated code analysis solutions.
• Experience with Infrastructure as Code (IaC) security scanning and secrets management tools.
• Experience conducting infrastructure or application-level vulnerability testing and security auditing.
• Industry certifications such as: GWAPT, OSWE, Burp Suite Certified Practitioner, CISSP, CSSLP
• Experience supporting enterprise DevSecOps transformation initiatives.
Company:
ConsultNet is a talent solutions company that helps businesses solve complex challenges by integrating talent, technology, and scalable delivery models. Founded in 1996, the company is headquartered in South Jordan, USA, with a team of 201-500 employees. The company is currently Growth Stage.

Apply