ZipRecruiter

Log In

1

Application Security Engineer Jobs in Washington

previous pagenext page

Showing results 21-40

All JobsApplication Security Engineer JobsApplication Security Engineer Jobs in Washington

Application Security Engineer information

See Washington salary details

$33

$75

$109

How much do application security engineer jobs pay per hour?

As of Aug 23, 2026, the average hourly pay for application security engineer in Washington is $75.21, according to ZipRecruiter salary data. Most workers in this role earn between $63.99 and $85.48 per hour, depending on experience, location, and employer.

What does an application security engineer do?

An application security engineer is responsible for ensuring the secure function of software application programs. For this career, you must have advanced training in cybersecurity and familiarity with multiple computer programming languages. Your main job duty is to evaluate lines of programming code to make sure a given application is safe from cyber-attack. You perform penetration testing to see if outside sources can "hack" into the application. You also do threat modeling and security code reviews of programming done by other application programmers.

What does an application security engineer do?

An Application Security Engineer is responsible for identifying and mitigating security vulnerabilities in software applications throughout their development lifecycle. They work closely with developers to ensure secure coding practices, conduct security assessments and code reviews, and implement tools for threat detection and prevention. Their primary goal is to protect applications from threats such as data breaches, unauthorized access, and other forms of cyber attacks. They also stay updated on the latest security trends and compliance requirements to keep applications safe.

What are the key skills and qualifications needed to thrive as an application security engineer, and why are they important?

To thrive as an Application Security Engineer, you need a solid background in software development, cybersecurity fundamentals, and vulnerability assessment, often supported by a degree in computer science or a related field. Familiarity with tools such as static and dynamic application security testing (SAST/DAST), penetration testing frameworks, and relevant certifications like CISSP or CEH is common. Attention to detail, problem-solving abilities, and strong communication skills help you effectively identify risks and collaborate with development teams. These skills are crucial for safeguarding applications against evolving threats and ensuring secure software delivery.

What are some common challenges faced by application security engineers when integrating security into the software development lifecycle?

Application Security Engineers often encounter challenges such as balancing security requirements with development speed, ensuring all team members understand secure coding practices, and keeping up with evolving threats. They frequently work closely with developers, DevOps, and QA teams to embed security controls without disrupting workflows. Overcoming these challenges requires strong communication skills, a deep understanding of both security and software development, and the ability to advocate for security as a shared responsibility across the organization.

What is the difference between Application Security Engineer vs Security Analyst?

AspectApplication Security EngineerSecurity Analyst
CertificationsCEH, CISSP, OSCPCISSP, Security+
Work EnvironmentDevelops security measures, reviews code, tests applicationsMonitors security systems, investigates incidents, analyzes threats
Industry UsageTech companies, software firms, organizations with strong app focusBroad sectors including finance, healthcare, government

Application Security Engineers focus on securing software applications through code review, vulnerability testing, and implementing security measures. Security Analysts monitor and analyze security threats, respond to incidents, and maintain security systems. While both roles require security certifications and work in security-focused environments, Application Security Engineers are more involved in the development and testing of secure applications, whereas Security Analysts focus on threat detection and incident response.

More about Application Security Engineer jobs

What are the most commonly searched types of Application Security Engineer jobs in Washington?

The most popular types of Application Security Engineer jobs in Washington are:

What are popular job titles related to Application Security Engineer jobs in Washington?

For Application Security Engineer jobs in Washington, the most frequently searched job titles are:

What job categories do people searching Application Security Engineer jobs in Washington look for?

The top searched job categories for Application Security Engineer jobs in Washington are:

What cities in Washington are hiring for Application Security Engineer jobs?

Cities in Washington with the most Application Security Engineer job openings:

What are popular job titles related to Application Security Engineer jobs in WA?

For Application Security Engineer jobs in WA, the most frequently searched job titles are:

Application Security Engineer jobs near you
Infographic showing various Application Security Engineer job openings in Washington as of August 2026, with employment types broken down into 75% Full Time, 15% Part Time, 2% Temporary, and 8% Contract. Highlights an 87% Physical, 2% Hybrid, and 11% Remote job distribution, with an average salary of $156,430 per year, or $75.2 per hour.

Staff Application Security Engineer

The Nuclear Company

Washington, DC • On-site

$66.25 - $88.50/hr

Full-time

Re-posted 7 days ago

Job description

Job Summary:
The Nuclear Company is the fastest growing startup in the nuclear and energy space, committed to delivering safe and reliable electricity. They are seeking a Staff Application Security Engineer to secure software, data systems, and developer workflows, working across multiple teams to embed security into their operations.
Responsibilities:
• Perform security reviews and threat models for NOS modules, internal tools, APIs, data workflows, AI-enabled features, and cloud-connected applications.
• Partner with engineering teams to identify and remediate risks across authentication, authorization, tenant isolation, input validation, secrets handling, encryption, logging, and data access.
• Review application designs and code changes for security issues before they become production risk.
• Define reusable security patterns for web applications, APIs, mobile workflows, internal platforms, and data-heavy systems.
• Help establish secure-by-default approaches for applications that support regulated, high-consequence infrastructure.
• Build and improve DevSecOps practices across the GitHub-based software development lifecycle, including code scanning, dependency review, secret scanning, branch protections, CI/CD hardening, and secure developer workflows.
• Partner with engineering teams to create paved roads: secure templates, checklists, automation, documentation, and lightweight review processes that help teams move faster with confidence.
• Triage and prioritize application security findings from SAST, SCA, secrets scanning, penetration tests, code reviews, and internal assessments.
• Develop pragmatic vulnerability management workflows, remediation guidance, and engineering-facing metrics.
• Support secure coding education through design reviews, office hours, documentation, and hands-on partnership with developers.
• Collaborate with cloud and platform engineers to secure AWS workloads, infrastructure-as-code, service integrations, data pipelines, and deployment workflows.
• Review integrations involving Palantir Foundry, partner APIs, internal data platforms, and AI-assisted engineering workflows.
• Help secure sensitive data flows across application, platform, and operational environments.
• Partner with infrastructure and developer teams to ensure application events, audit logs, and security signals are captured in ways that support investigation and response.
• Navigate the security expectations of a regulated nuclear energy environment, including relevant cybersecurity frameworks and critical infrastructure considerations.
• Serve as a trusted security partner to software engineers, product managers, data engineers, infrastructure teams, and business stakeholders.
• Communicate risk clearly and practically, balancing security, delivery speed, product usability, and operational impact.
• Contribute to the application and product security roadmap as the company scales from early-stage systems to fleet-scale operations.
• Help build a culture of ownership, velocity, and technical rigor across engineering and cybersecurity.
Qualifications:
Required:
• 4+ years of experience in application security, product security, software security, or software engineering with a strong security focus.
• Hands-on experience reviewing, building, or securing modern software systems, including web applications, APIs, distributed systems, or cloud-native services.
• Strong understanding of common application security risks, including authentication, authorization, access control, injection, insecure deserialization, SSRF, secrets exposure, dependency and supply chain risk, and insecure API design.
• Experience with secure SDLC tooling and workflows such as GitHub Advanced Security, CodeQL, Dependabot, SAST, SCA, secret scanning, CI/CD security, or equivalent platforms.
• Ability to read and reason about code in at least one modern programming language such as Python, TypeScript, Go, Java, C#, or C++.
• Familiarity with AWS security concepts, including IAM, logging, encryption, networking, secrets management, and infrastructure-as-code.
• Strong communication skills and the ability to work directly with engineers to solve security problems without creating unnecessary friction.
• Have a strong grasp of offensive security to anticipate risks from an adversary’s perspective, not just check compliance boxes.
Preferred:
• Experience securing software in regulated, industrial, energy, national security, aerospace, medical, or other mission-critical environments.
• Familiarity with AI-assisted development tools, LLM-enabled applications, prompt-injection risks, model/tool integrations, or AI software supply chain concerns.
• Experience with vulnerability management, penetration testing, experience with DAST tools, or incident response.
• Familiarity with frameworks or standards such as OWASP ASVS, OWASP Top 10, OWASP API Security Top 10, NIST CSF, NIST 800-53, SOC 2, IEC 62443, or NERC CIP.
• Security certifications such as AWS Certified Security – Specialty or OSWE.
• Genuine interest in nuclear energy, critical infrastructure, hard-tech, and applying software security to physical systems.
Company:
The Nuclear Company enables the deployment of nuclear power plants at fleet-scale by integrating government and industry partners. Founded in 2023, the company is headquartered in Lexington, USA, with a team of 51-200 employees. The company is currently Growth Stage.

Apply