ZipRecruiter

Log In

1

Java Security Engineer Trainee Jobs in Washington, DC

Shorepoint Inc.

Application Security Engineer

Herndon, VA · On-site

$60.50 - $80.75/hr

We are seeking an Application Security Engineer with expertise in Static and Dynamic Application ... with Java, Python, .NET or C#. * 2+ years of experience working in Linux-based environments ...

Maxtena Inc

FIPS 140 Security Engineer

Germantown, MD · On-site

Experience with various programming languages such as C, C++, Python, or Java, as well as development environments * Ability to comprehend security standard requirements and apply them to products.

Booz Allen Hamilton, Inc.

ICAM Security Engineer

Mclean, VA · On-site

$86.80K - $198K/yr

Share ICAM Security Engineer The Opportunity: The user is the last frontier for cybersecurity. It ... Knowledge of Scripting or other programming language, such as powershell, json, or java * Bachelor ...

Booz Allen Hamilton, Inc.

ICAM Security Engineer

Mclean, VA · On-site

$86.80K - $198K/yr

ICAM Security Engineer The Opportunity: The user is the last frontier for cybersecurity. It's where ... Knowledge of Scripting or other programming language, such as powershell, json, or java * Bachelor ...

next page

Showing results 1-20

People also search for

All JobsJava Security Engineer Trainee JobsJava Security Engineer Trainee Jobs in Washington, DC

Java Security Engineer Trainee information

See Washington, DC salary details

$54

$62

$74

How much do java security engineer trainee jobs pay per hour?

As of May 31, 2026, the average hourly pay for java security engineer trainee in Washington, DC is $62.62, according to ZipRecruiter salary data. Most workers in this role earn between $57.16 and $68.08 per hour, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a Java Security Engineer Trainee, and why are they important?

To thrive as a Java Security Engineer Trainee, you need a strong understanding of Java programming, cybersecurity fundamentals, and secure coding practices, often supported by a degree in computer science or related fields. Familiarity with security tools such as OWASP ZAP, static code analyzers, and knowledge of frameworks like Spring Security is typically required, and certifications like CompTIA Security+ or Certified Ethical Hacker (CEH) are advantageous. Analytical thinking, attention to detail, and effective communication are crucial soft skills for identifying vulnerabilities and collaborating with development teams. These skills and qualifications are essential for building secure applications, mitigating risks, and ensuring compliance with security standards.

What can a Java Security Engineer Trainee expect in terms of mentorship and collaboration with senior security engineers?

As a Java Security Engineer Trainee, you will typically work closely with experienced security engineers who provide mentorship and guidance on secure coding practices, vulnerability assessment, and security tool usage. You'll often collaborate with software developers, QA testers, and DevOps teams to identify and address security risks throughout the development lifecycle. Frequent code reviews, pair programming sessions, and security workshops are common, helping you build both technical skills and a strong security mindset. This team-oriented environment ensures you gain practical knowledge and grow steadily into more advanced security roles.

What does a Java Security Engineer Trainee do?

A Java Security Engineer Trainee assists in developing and implementing security measures for Java-based applications and systems. They learn how to identify vulnerabilities, apply security best practices, and use tools to protect software from threats. Trainees often work under the supervision of senior engineers, gaining hands-on experience in secure coding, code reviews, and compliance with security standards. Their role helps ensure that applications are robust against cyber attacks and data breaches.
What are popular job titles related to Java Security Engineer Trainee jobs in Washington, DC? For Java Security Engineer Trainee jobs in Washington, DC, the most frequently searched job titles are:
What job categories do people searching Java Security Engineer Trainee jobs in Washington, DC look for? The top searched job categories for Java Security Engineer Trainee jobs in Washington, DC are:
Java Security Engineer Trainee jobs near you
Application Security Engineer

Application Security Engineer

Shorepoint Inc.

Herndon, VA • On-site

$60.50 - $80.75/hr

Full-time

Medical, Retirement, PTO

Posted 10 days ago

Job description

Who we are:
ShorePoint is a fast-growing, industry recognized and award-winning cybersecurity services firm with a focus on high-profile, high-threat, private and public-sector customers who demand experience and proven security models to protect their data. ShorePoint subscribes to a "work hard, play hard" mentality and celebrates individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers. We are equally passionate about an environment that supports creativity, accountability, diversity, inclusion and a focus on giving back to our community.
The Perks:
As recognized members of the Cyber Elite, we work together in partnership to defend our nation's critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individuals technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, including major carriers for health care providers. Highlighted benefits offered: 144 hours of PTO, 11 holidays, 85% of insurance premium covered, 401k, continued education, certifications maintenance, reimbursement and more.
Who we're looking for:
We are seeking an Application Security Engineer with expertise in Static and Dynamic Application Security Testing (SAST & DAST) methodologies and enterprise-level security controls. Your mission is to fortify our software supply chain by integrating rigorous security testing directly into the development lifecycle to preemptively neutralize vulnerabilities. The Application Security Engineer will be responsible for the end-to-end administration of Burp Suite and Veracode, managing Integrated Development Environment (IDE) plugins and ensuring all enterprise web applications align with federal compliance and OWASP standards. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market.
What you'll be doing:
  • Support and operate application security testing capabilities across SAST, DAST and IDE plug-in environments, with primary focus on Burp Suite and Veracode.
  • Configure, maintain and troubleshoot Burp Suite and Veracode integrations to enable consistent application security testing workflows.
  • Partner with development and engineering teams to identify, validate and remediate security vulnerabilities.
  • Apply vulnerability standards and scoring methodologies to findings, including OWASP Top 10, CVSS, CWE, WASC and SANS-25.
  • Navigate and troubleshoot within Linux or UNIX environments, including basic website connectivity issues.
  • Support the design and implementation of enterprise-wide security controls that secure applications, systems, networks or infrastructure services.
  • Use IDEs and development toolchains (Eclipse, JDeveloper, Visual Studio) to support developer workflows, including pipeline development activities where applicable.
  • Support compliance-aligned security activities in federal environments leveraging NIST 800-53, FIPS and/or FedRAMP standards.

What you need to know:
  • Strong understanding of application security testing concepts and operational support for SAST, DAST and IDE plug-in environments.
  • Hands-on capability with enterprise web application security and common vulnerability classes.
  • Familiarity with vulnerability scoring, classification and prioritization frameworks (OWASP Top 10, CVSS, CWE, WASC, SANS-25).
  • Working knowledge of federal compliance standards (NIST 800-53, FIPS, FedRAMP).
  • Ability to work effectively in Linux or UNIX environments for navigation and basic troubleshooting.
  • Ability to communicate findings clearly and work cross-functionally to support remediation.

Must have's:
  • Bachelor's degree in an IT-related field.
  • 6+ years of Information Technology experience.
  • 3+ years of experience supporting SAST, DAST and IDE plug-in environments using Burp Suite, including 3+ years of hands-on Burp Suite experience.
  • 1+ year of experience supporting SAST, DAST and IDE plug-in environments using Veracode.
  • 3+ years of experience using the design and implementation of enterprise-wide security controls to secure applications, systems, networks or infrastructure services.
  • 2+ years of experience with Java, Python, .NET or C#.
  • 2+ years of experience working in Linux-based environments, including navigating and troubleshooting basic website connectivity issues.
  • Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
  • Experience with Eclipse, JDeveloper and/or Visual Studio, including pipeline development experience.
  • Experience securing enterprise web applications, including familiarity with OWASP Top 10, CVSS, CWE, WASC and SANS-25.
  • Knowledge of federal compliance standards, including NIST 800-53, FIPS and/or FedRAMP.
  • Applicants must be a U.S. citizen in compliance with federal contract requirements.

Beneficial to have:
  • Industry recognized certifications.
  • Experience with Interactive Application Security Testing (IAST) tools and capabilities.
  • Experience with HackerOne.
  • Experience with Selenium.
  • Experience writing bash scripts.
  • Experience with OWASP ZAP or Burp Proxy.

Where it's done:
  • Remote (Herndon, VA).

Apply