ZipRecruiter

Log In

1

Security Coding Jobs in Virginia (NOW HIRING)

Commence

HSCRC Coding Reviewer

Virginia Beach, VA · On-site

$40 - $45/hr

The HSCRC Coding Reviewer will be a subject matter expert in clinical documentation review ... Practical knowledge of and ability to comply with system and information security requirements.

Nightwing

Security Product Reverse Engineer

Sterling, VA · On-site

$122K - $253K/yr

Nightwing is seeking an experienced Security Product Reverse Engineer (RE) to support advanced ... Conduct in-depth source code analysis and comprehensive code audits * Develop, test, and debug ...

next page

Showing results 1-20

All JobsSecurity Coding JobsSecurity Coding Jobs in Virginia

Security Coding information

See Virginia salary details

$10.9K

$116.4K

$149.2K

How much do security coding jobs pay per year?

As of Jul 16, 2026, the average yearly pay for security coding in Virginia is $116,442.00, according to ZipRecruiter salary data. Most workers in this role earn between $107,100.00 and $134,300.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive in the Security Coding position, and why are they important?

To thrive as a Security Coding professional, you need a strong background in software development, cybersecurity principles, and vulnerability assessment, typically supported by a degree in computer science or a related field. Familiarity with languages such as Python, C/C++, Java, as well as security tools like static analysis software and certifications such as CISSP or CEH, is often required. Attention to detail, problem-solving abilities, and the capacity to communicate complex technical risks to non-technical stakeholders are highly valued soft skills. These qualifications ensure that code is developed with security best practices in mind, protecting organizations from cyber threats and compliance issues.

What is a Security Coding job?

A Security Coding job involves writing secure code to protect applications and systems from vulnerabilities and cyber threats. Professionals in this role implement security best practices, conduct code reviews, and fix security flaws in software. They often work closely with developers and security teams to ensure compliance with industry standards. Strong knowledge of secure coding guidelines, penetration testing, and threat modeling is essential for this role.

What are some common challenges faced by Security Coding professionals on the job?

Security Coding professionals often face the challenge of balancing rapid software development with the need to implement robust security measures. They may encounter evolving threats and zero-day vulnerabilities, which require them to stay updated and adapt security practices quickly. Collaborating with development teams to integrate secure coding practices into fast-paced release cycles is also common. Since new technologies and frameworks are frequently adopted, ongoing learning and adaptability are key to overcoming these challenges and maintaining secure applications.

Is cybersecurity a coding job?

Cybersecurity roles, including security coding, often involve writing and analyzing code to identify vulnerabilities and develop secure software. Skills in programming languages like Python, C, or Java are commonly required, along with knowledge of security tools and protocols. However, some cybersecurity positions focus more on analysis, policy, or management rather than coding specifically.

What pays more, coding or cybersecurity?

Security coding, which involves developing secure software, generally offers salaries comparable to cybersecurity roles, such as security analysts or engineers. Cybersecurity positions often have higher earning potential due to the demand for protecting systems and data, especially with certifications like CISSP or CEH. Both fields require technical skills and can lead to high-paying careers, but cybersecurity roles tend to have a broader range of higher salary opportunities.

Can you make $500,000 a year in cyber security?

Security coding roles, such as cybersecurity engineers or senior developers, can reach or exceed $500,000 annually with extensive experience, advanced skills, and often in high-demand sectors or leadership positions. Achieving this level typically requires specialized certifications, expertise in secure coding practices, and often involves working in senior or executive roles with significant responsibilities.

Can I make $200,000 a year in cyber security?

Security coding roles, such as cybersecurity engineers or developers, can reach or exceed $200,000 annually with extensive experience, advanced skills, and certifications like CISSP or CEH. High salaries are often found in senior positions, specialized fields, or in organizations with complex security needs, especially in high-cost regions or industries with critical security requirements.
What are popular job titles related to Security Coding jobs in Virginia? For Security Coding jobs in Virginia, the most frequently searched job titles are:
What job categories do people searching Security Coding jobs in Virginia look for? The top searched job categories for Security Coding jobs in Virginia are:
Security Coding jobs near you
Infographic showing various Security Coding job openings in Virginia as of July 2026, with employment types broken down into 1% Internship, 1% As Needed, 85% Full Time, 10% Part Time, 1% Temporary, and 2% Contract. Highlights an 79% Physical, 3% Hybrid, and 18% Remote job distribution, with an average salary of $116,442 per year, or $56 per hour.
Web Developer Security Engineer with Security Clearance

Web Developer Security Engineer with Security Clearance

Horizon Global Partners

Reston, VA • On-site

Other

Posted 19 days ago

Job description

Web Developer Security Engineer
Company: Horizon Global Partners (HgP)
Division: Defense & Aerospace Services (DAS)
Location: Washington, DC (Hybrid)
Employment Type: Full-Time
Clearance Requirement: Public Trust Tier 2 (Active preferred; ability to obtain required)
Position Summary
Horizon Global Partners (HgP) is seeking a highly skilled Web Developer Security Engineer to support a Federal Government customer by securing mission-critical web applications, APIs, and cloud-based services. The successful candidate will integrate security throughout the Secure Software Development Lifecycle (SSDLC), identify and remediate application vulnerabilities, implement DevSecOps practices, and strengthen application security through secure architecture, automation, and continuous monitoring.
The ideal candidate combines strong software development experience with application security engineering expertise and has hands-on experience implementing secure coding practices, threat modeling, vulnerability management, Web Application Firewalls (WAF), File Integrity Monitoring (FIM), and CI/CD security automation.
________________________________________
Position Responsibilities
Application Security Engineering
• Identify, assess, and remediate web application vulnerabilities, insecure dependencies, and application misconfigurations.
• Conduct application security reviews throughout the Secure Software Development Lifecycle (SSDLC).
• Validate remediation efforts through technical testing and secure code review.
• Develop and maintain secure coding standards aligned with OWASP best practices.
Secure Architecture & Threat Modeling
• Perform threat modeling and application risk assessments.
• Design secure web application and REST API architectures.
• Recommend secure authentication, authorization, encryption, and data protection mechanisms.
• Implement secure design patterns that reduce application attack surfaces.
DevSecOps & CI/CD Security
• Integrate security controls into CI/CD pipelines.
• Automate security testing using Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and secrets scanning.
• Implement security gates to prevent vulnerable code from reaching production.
• Support Git-based secure development workflows and DevSecOps automation.
Monitoring & Incident Response
• Analyze web server, application, and security logs for indicators of compromise.
• Configure and tune Web Application Firewalls (WAF) to protect enterprise web applications.
• Implement and maintain File Integrity Monitoring (FIM) solutions.
• Support security incident investigations and forensic analysis.
Secure Software Development
Develop and secure applications using technologies including:
• .NET
• C#
• ASP.NET MVC
• WCF
• HTML5
• CSS3
• JavaScript
• REST APIs
• SQL
• Python
• Node.js
• React
• TypeScript
Mobile & Cloud Security
• Evaluate and implement security controls for mobile web applications.
• Support secure cloud application deployments.
• Collaborate with infrastructure and cloud engineering teams to improve application security posture.
Compliance & Documentation
• Support compliance with NIST SP 800-53, FISMA, and FedRAMP requirements.
• Participate in security assessments, audits, and authorization activities.
• Develop security documentation, remediation plans, risk assessments, and engineering standards.
• Produce security metrics and compliance reports.
________________________________________
Required Qualifications
• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field.
• Minimum 3 years of Application Security (AppSec), Secure Software Development Lifecycle (SSDLC), or Web Application Security experience.
• Extensive experience with secure software development and vulnerability remediation.
• Experience implementing DevSecOps principles throughout CI/CD pipelines.
• Strong knowledge of OWASP Top 10 vulnerabilities and secure coding practices.
• Experience performing threat modeling and application risk assessments.
• Experience deploying, tuning, and maintaining Web Application Firewalls (WAF).
• Experience configuring and managing File Integrity Monitoring (FIM).
• Experience analyzing web server and application logs.
• Experience with SIEM, IDS/IPS, EDR, or Network Detection & Response (NDR) technologies.
• Experience securing REST APIs and cloud-based applications.
• Excellent analytical, documentation, and communication skills.
________________________________________
Required Technical Skills
• .NET
• C#
• ASP.NET MVC
• WCF
• HTML5
• CSS3
• JavaScript
• TypeScript
• React
• Node.js
• Python
• REST APIs
• SQL
• Secure SDLC (SSDLC)
• DevSecOps
• CI/CD Security
• Threat Modeling
• OWASP Top 10
• Secure Coding
• Vulnerability Management
• WAF
• File Integrity Monitoring (FIM)
• SIEM
• IDS/IPS
• EDR
• NDR
• Git
• Security Automation
• Mobile Web Security
________________________________________
Required Credentials
Candidates should possess current security certifications that demonstrate expertise in secure software development and application security. The Government requires at least one current certification from each of the following categories, with equivalent legacy certifications accepted if professionally maintained for at least five years:
Application Security (AppSec) – At least one required
• Certified Secure Software Lifecycle Professional (CSSLP)
• GIAC Certified Web Application Defender (GWEB)
• EC-Council Certified Application Security Engineer (CASE)
Offensive Security – At least one required
• OffSec Web Expert (OSWE)
• Offensive Security Certified Professional (OSCP)
Foundational Security – At least one required
• CompTIA Security+
• GIAC Security Essentials (GSEC)
________________________________________
Preferred Qualifications
• Experience with Federal Government or DoD environments.
• Experience with NIST SP 800-53, FISMA, and FedRAMP authorization processes.
• Experience with AWS cloud security.
• Experience securing Docker and Kubernetes environments.
• Experience implementing automated security gates within CI/CD pipelines.
• Experience using AI-assisted development tools such as GitHub Copilot or OpenAI APIs to improve secure software development workflows.
________________________________________
Why Join Horizon Global Partners?
At Horizon Global Partners, you’ll support mission-critical Federal Government systems by integrating security into every stage of the software development lifecycle. You’ll collaborate with software developers, DevSecOps engineers, cybersecurity professionals, and cloud architects to build resilient, secure, and compliant web applications that support critical government missions.

Apply