ZipRecruiter

Log In

1

Application Security Engineer Jobs in Washington

Eliassen Group

Application Security Engineer

Washington, DC · On-site

$66.50 - $89/hr

Work with application developers ensure adoption of security principals and best practices. 6. Provides direction and support in security management and security architecture standards and ...

Hirekeyz Inc

APPLICATION SECURITY ENGINEER

Fairfax, VA · On-site

$60 - $80.25/hr

Application Security Engineer Location: Onsite in Fairfax, VA 3 days and in Washington, DC 2 days per week. Duration: Long Term Contract Positions Require a Secret Clearance The Application Security ...

Comtech, LLC

Application Security Engineer

Washington, DC

$66.50 - $89/hr

Application Security Engineer Location: Washington, DC * Support PeopleSoft HCM/FSCM/ELM/CRM/EPM application security. * Implement specifically SSO for Oracle ELM, HCM and Finance PeopleSoft Modules ...

Shorepoint Inc.

Application Security Engineer

Herndon, VA · On-site

$60.50 - $80.75/hr

The Application Security Engineer will be responsible for the end-to-end administration of Burp Suite and Veracode, managing Integrated Development Environment (IDE) plugins and ensuring all ...

Peraton

Application Security Engineer

Herndon, VA · On-site

$104K - $166K/yr

Define application security strategy, standards, and SDLC integration points; champion secure-by-design practices across engineering and DevSecOps teams. * Lead threat modeling and secure ...

Shorepoint Inc.

Application Security Engineer

Herndon, VA · On-site

$60.50 - $80.75/hr

The Application Security Engineer will be responsible for the end-to-end administration of Burp Suite and Veracode, managing Integrated Development Environment (IDE) plugins and ensuring all ...

Peraton

Application Security Engineer

Herndon, VA

$104K - $166K/yr

Define application security strategy, standards, and SDLC integration points; champion secure-by-design practices across engineering and DevSecOps teams. * Lead threat modeling and secure ...

Peraton

Application Security Engineer

Herndon, VA · On-site

$104K - $166K/yr

Define application security strategy, standards, and SDLC integration points; champion secure-by-design practices across engineering and DevSecOps teams. * Lead threat modeling and secure ...

Virtru

Application Security Engineer

Washington, DC

$180K - $200K/yr

As an application security engineer you will help our engineering teams maintain and develop our product, and directly have impact in a security centric company and product. An ideal candidate is ...

New

MANTECH

Application Security Engineer

Hanover, MD

$58 - $77.25/hr

The Application Security (AppSec) Engineer will leverage their strong technical background and knowledge to support software assurance and security initiatives for a mission-critical organization ...

MANTECH

Application Security Engineer

Hanover, MD

$58 - $77.25/hr

The Application Security (AppSec) Engineer will leverage their strong technical background and knowledge to support software assurance and security initiatives for a mission-critical organization ...

MANTECH

Application Security Engineer

Hanover, MD

$58 - $77.25/hr

The Application Security (AppSec) Engineer will leverage their strong technical background and knowledge to support software assurance and security initiatives for a mission-critical organization ...

next page

Showing results 1-20

All JobsApplication Security Engineer JobsApplication Security Engineer Jobs in Washington

Application Security Engineer information

See Washington salary details

$33

$75

$109

How much do application security engineer jobs pay per hour?

As of Jun 14, 2026, the average hourly pay for application security engineer in Washington is $75.21, according to ZipRecruiter salary data. Most workers in this role earn between $63.99 and $85.48 per hour, depending on experience, location, and employer.

What Does an Application Security Engineer Do?

An application security engineer is responsible for ensuring the secure function of software application programs. For this career, you must have advanced training in cybersecurity and familiarity with multiple computer programming languages. Your main job duty is to evaluate lines of programming code to make sure a given application is safe from cyber-attack. You perform penetration testing to see if outside sources can "hack" into the application. You also do threat modeling and security code reviews of programming done by other application programmers.

What are some common challenges faced by Application Security Engineers when integrating security into the software development lifecycle?

Application Security Engineers often encounter challenges such as balancing security requirements with development speed, ensuring all team members understand secure coding practices, and keeping up with evolving threats. They frequently work closely with developers, DevOps, and QA teams to embed security controls without disrupting workflows. Overcoming these challenges requires strong communication skills, a deep understanding of both security and software development, and the ability to advocate for security as a shared responsibility across the organization.

What does an Application Security Engineer do?

An Application Security Engineer is responsible for identifying and mitigating security vulnerabilities in software applications throughout their development lifecycle. They work closely with developers to ensure secure coding practices, conduct security assessments and code reviews, and implement tools for threat detection and prevention. Their primary goal is to protect applications from threats such as data breaches, unauthorized access, and other forms of cyber attacks. They also stay updated on the latest security trends and compliance requirements to keep applications safe.

What are the key skills and qualifications needed to thrive as an Application Security Engineer, and why are they important?

To thrive as an Application Security Engineer, you need a solid background in software development, cybersecurity fundamentals, and vulnerability assessment, often supported by a degree in computer science or a related field. Familiarity with tools such as static and dynamic application security testing (SAST/DAST), penetration testing frameworks, and relevant certifications like CISSP or CEH is common. Attention to detail, problem-solving abilities, and strong communication skills help you effectively identify risks and collaborate with development teams. These skills are crucial for safeguarding applications against evolving threats and ensuring secure software delivery.

What is the difference between Application Security Engineer vs Security Analyst?

AspectApplication Security EngineerSecurity Analyst
CertificationsCEH, CISSP, OSCPCISSP, Security+
Work EnvironmentDevelops security measures, reviews code, tests applicationsMonitors security systems, investigates incidents, analyzes threats
Industry UsageTech companies, software firms, organizations with strong app focusBroad sectors including finance, healthcare, government

Application Security Engineers focus on securing software applications through code review, vulnerability testing, and implementing security measures. Security Analysts monitor and analyze security threats, respond to incidents, and maintain security systems. While both roles require security certifications and work in security-focused environments, Application Security Engineers are more involved in the development and testing of secure applications, whereas Security Analysts focus on threat detection and incident response.

More about Application Security Engineer jobs
What are the most commonly searched types of Application Security Engineer jobs in Washington? The most popular types of Application Security Engineer jobs in Washington are:
What are popular job titles related to Application Security Engineer jobs in Washington? For Application Security Engineer jobs in Washington, the most frequently searched job titles are:
What job categories do people searching Application Security Engineer jobs in Washington look for? The top searched job categories for Application Security Engineer jobs in Washington are:
What cities in Washington are hiring for Application Security Engineer jobs? Cities in Washington with the most Application Security Engineer job openings:
What are popular job titles related to Application Security Engineer jobs in WA? For Application Security Engineer jobs in WA, the most frequently searched job titles are:
Application Security Engineer jobs near you
Infographic showing various Application Security Engineer job openings in Washington as of June 2026, with employment types broken down into 100% Full Time. Highlights an 100% Remote job distribution, with an average salary of $156,430 per year, or $75.2 per hour.
Application Security Engineer

Application Security Engineer

Eliassen Group

Washington, DC

$66.50 - $89/hr

Full-time

Posted 15 hours ago

Job description

Company Description

Demonstrate your expertise and challenge your skills in this exciting IT Security Engineering opportunity! We are seeking an experienced IT Security Engineer for a lead role within our Security Team in our Washington DC IT Department. In this role, you will provide IT security support for applications and software systems in all platforms as well as providing security support to all systems in production, staging and development environments. This Security Engineer role will work closely with Washington DC IT departments and ensures the security and protection of organizational information assets including data, applications, systems, databases, networks, and other resources. We offer a competitive salary and comprehensive benefits, making this a great opportunity for an experienced IT Security Engineer, like you, to take their IT career to the next level!

Job Description

1. Security Engineer works on defining security frameworks for existing and new systems.

2. Represents the IT security team for enterprise projects during development phases like architecture/design review, providing IT security consulting and recommendations, to ensure the implementation of a secure application design.

3. Responsible for supporting the implementation and enforcement of secure application design principles

4. Responsible for explaining and demonstrating vulnerabilities to application/system owners, and provide recommendations for mitigation.

5. Responsible for defining and designing security code analysis tools and framework, Performing code and design reviews of all internal and external software products. Work with application developers ensure adoption of security principals and best practices.

6. Provides direction and support in security management and security architecture standards and documentations.

7. Provides fault resolution and escalation advice.

8. Responsible for defining processes to manage and enforce application security.

9. Conducts active penetration tests; discover vulnerabilities in information systems.

10. Participate in IT security compliance and audit efforts (eg PCI DSS )


Qualifications

College degree (relevant field) or equivalent experience; 3-5 years of work experience.

2+ years of experience in web application development in .NET, Java EE, and SQL

1+ years of experience in web or mobile application security preferred

HTTP protocol knowledge required

Knowledge of authentication mechanisms like SAML, OAuth etc. along with web service security protocols for SOAP such as WS-Security are nice to have

Knowledge of information security principles, web applications and a level of familiarity with malicious code and common techniques used by hackers

Experience with application security code review practices / static analysis and methods, such as OWASP Top Ten

Detailed knowledge and understanding of the Payment Card Industry (PCI) data security standards (PCI DSS) as well as experience in the implementation of controls to mitigate PCI issues

Experience with Application Security Firewalls, F5' ASM / Citrix's Teros etc are desirable

Experience in creating, maintaining, and executing Incident Response Plans

Strong interpersonal and communications skills along with strong customer service skills

Strong programming background with: JavaScript, JSP, PHP, ASP.Net strongly preferred

Knowledge of Security Flaws and its Resolution as listed in sites like OWASP, SANS etc.

Knowledge and understanding of network and web related protocols (e.g., TCP/IP, UDP, IPSEC, DNS, LTM, GTM) preferred

Experience in technical security countermeasures, risk management, contingency planning, and data communications networking preferred


Additional Information

All your information will be kept confidential according to EEO guidelines. 


http://www.eliassen.com/consulting-services-consultant/agile-consulting-services


Eliassen Group logo

About Eliassen Group

Sourced by ZipRecruiter

Eliassen Group provides strategic consulting and talent solutions to drive our clients' innovation and business results. Our purpose is to positively impact the lives of our employees, clients, consultants, and the communities in which we operate. Leveraging over 30 years of success, our expertise in talent solutions, life sciences consulting, Agile consulting, cloud services, risk management, business optimization, and managed services enables us to partner with our clients to execute their business strategy and scale effectively. Headquartered in Reading, MA, and with offices from coast to coast, Eliassen Group offers local community presence and deep networks, as well as national reach.

Industry

It services

Company size

5,001 - 10,000 Employees

Headquarters location

Reading, MA, US

Year founded

1989

View All Eliassen Group Jobs

Apply