Fullstack Developer Java Jobs in Silver Spring, MD

Cyber AI Deployment Engineer

Location: DC Metro

Overview
Accenture Federal's Secure AI Breach and Exploit Research Team (SABER) is seeking a hybrid technologist who is equally comfortable building modern software systems and breaking them using AFS's AI Cyber Harness, FedCyber.ai.  This role blends fullstack engineering, advanced penetration testing, and AIdriven security automation. The ideal candidate has deep experience in secure software engineering, offensive security methodologies, and handson application security testing-particularly using or building AI/MLpowered tooling. You will operate and enhance an internal AI Harness capable of scanning code repositories for vulnerabilities, performing automated triage, generating remediation insights, and integrating with CI/CD pipelines.

Key Responsibilities

AI Harness Operations & Automation

• Run, monitor, and optimize AFS' AIpowered harness (FedCyber.ai) that scans code repositories for vulnerabilities across multiple languages and frameworks.
• Integrate AIpowered SAST/DAST/SCA insights into developer workflows and CI/CD pipelines.
• Develop custom AI assistive components to improve detection accuracy, falsepositive reduction, and exploitability ranking.
• Automate repetitive security analysis tasks and build scalable scanning workflows.
• Be the Expert Human in the Lead to analyze and customize (if needed) remediation options provided by the scan results and work with the client to roll out immediate patches.

Secure FullStack Development

• Design, develop, test, and deploy secure fullstack applications using modern frameworks (e.g., React, Node.js, Python, Java, Go).
• Implement secure coding practices and build infrastructureascode for cloud and onpremise environments (Azure, AWS, GCP preferred).
• Collaborate with DevSecOps teams to embed security controls and AIpowered code review capabilities into SDLC.

Penetration Testing & Offensive Security

• Lead and execute penetration testing engagements targeting web apps, APIs, cloud services, and infrastructure.
• Perform threat modeling, exploit development, vulnerability research, and redteam style assessments.
• Validate AIgenerated findings via manual analysis and offensive techniques (e.g., reverse engineering, fuzzing, ROP chaining).
• Develop testing scripts, harnesses, and tooling to assess complex systems.

Collaboration & Governance

• Work closely with developers, architects, and cyber teams to prioritize fixes and advise on secure design patterns.
• Communicate findings and recommendations to technical and nontechnical audiences.
• Contribute to security standards, automation frameworks, and AI/ML model governance.

Required Qualifications

• A minimum of 2 years of professional experience in one or more of the following domains: Cybersecurity, Software Development, Artificial Intelligence/Machine Learning (AI/ML), DevSecOps, DevOps, Cloud Computing, or Systems Engineering.
• Experience in software development, with a strong foundation in coding and application design.
• Experience in penetration testing and/or Red Team operations, with a deep understanding of offensive security practices.
• Comprehensive knowledge of vulnerability classes, including but not limited to OWASP, cloud security, containerization, supply chain risks, and proficiency with tools such as SAST, DAST, and SCA.
• Experience working with CI/CD pipelines using platforms like GitHub, GitLab, or Bitbucket, including automated code analysis workflows.
• Familiarity with machine learning concepts, large language models (LLMs), agent-based systems, or security tools powered by AI/ML technologies.
• Flexibility to work onsite as required by client needs in the DC Metro.

Preferred Qualifications

• Experience customizing or developing AIdriven cybersecurity tools.
• Familiarity with AI/MLassisted security scanning preferred
• Background in reverse engineering or malware analysis (Ghidra, IDA, Radare).
• Offensive security certifications (OSCP, OSWE, OSEP, GXPN, CREST).
• Experience in highly regulated or classified environments.
• Knowledge of zerotrust architectures, DevSecOps pipelines, and secure software supply chain practices