1

Security Software Engineer Jobs in Virginia (NOW HIRING)

... Security Engineer, Cybersecurity Software Developer, Secure Systems Developer, Data Protection Software Engineer, Network Security Developer, Cross-Domain Architect, Secure Application Developer ...

... Security Engineer, Cybersecurity Software Developer, Secure Systems Developer, Data Protection Software Engineer, Network Security Developer, Cross-Domain Architect, Secure Application Developer ...

... Security Engineer, Cybersecurity Software Developer, Secure Systems Developer, Data Protection Software Engineer, Network Security Developer, Cross-Domain Architect, Secure Application Developer ...

Showing results 21-40

Security Software Engineer information

See Virginia salary details

$22.8K

$138.4K

$173K

How much do security software engineer jobs pay per year?

As of Aug 21, 2026, the average yearly pay for security software engineer in Virginia is $138,402.00, according to ZipRecruiter salary data. Most workers in this role earn between $115,000.00 and $158,600.00 per year, depending on experience, location, and employer.

What is a security software engineer?

Security Software Engineers are professionals who design, develop, and implement software solutions focused on maintaining and enhancing the security of computer systems, applications, and networks. They identify potential security vulnerabilities, create safeguards, and ensure that software products comply with security standards and best practices. Their responsibilities often include code reviews, penetration testing, and collaborating with other developers and IT staff to address security risks throughout the software development lifecycle.

How does a security software engineer typically collaborate with other teams during the software development lifecycle?

Security Software Engineers work closely with development, operations, and quality assurance teams to integrate security best practices throughout the software development lifecycle. They often participate in code reviews, threat modeling sessions, and incident response planning to ensure that security is considered at every stage. Regular communication and collaboration with cross-functional teams help identify potential vulnerabilities early and promote a security-first culture across the organization. This collaborative approach not only strengthens the final product but also provides valuable opportunities for learning and professional growth.

What are the key skills and qualifications needed to thrive as a security software engineer, and why are they important?

To thrive as a Security Software Engineer, you need a strong background in computer science, secure coding practices, and cybersecurity principles, often supported by a degree in a related field or relevant certifications. Familiarity with tools such as static and dynamic code analyzers, penetration testing suites, and secure development lifecycle frameworks is essential. Standout professionals demonstrate critical thinking, attention to detail, and strong communication skills to identify vulnerabilities and collaborate with cross-functional teams. These skills and qualities are vital for building resilient software systems and protecting organizations from evolving security threats.

What is the difference between Security Software Engineer vs Security Analyst?

AspectSecurity Software EngineerSecurity Analyst
Required CredentialsBachelor's in CS, cybersecurity certifications (e.g., CISSP, CEH)Bachelor's in IT, cybersecurity certifications (e.g., CISSP, Security+)
Work EnvironmentDevelops security tools, software, and systemsMonitors security alerts, analyzes threats, and responds to incidents
Employer & Industry UsageTech companies, cybersecurity firms, large enterprisesFinancial institutions, government agencies, corporations

Security Software Engineers focus on designing and developing security software and tools, while Security Analysts monitor and respond to security threats. Both roles require cybersecurity certifications and work in similar environments, but their core responsibilities differ significantly.

What job categories do people searching Security Software Engineer jobs in Virginia look for?

The top searched job categories for Security Software Engineer jobs in Virginia are:

What are popular job titles related to Security Software Engineer jobs in VA?

For Security Software Engineer jobs in VA, the most frequently searched job titles are:

Infographic showing various Security Software Engineer job openings in Virginia as of August 2026, with employment types broken down into 79% Full Time, 19% Part Time, and 2% Contract. Highlights an 92% Physical, 3% Hybrid, and 5% Remote job distribution, with an average salary of $138,402 per year, or $66.5 per hour.

Sr. Software Security Engineer

Alphalogic, Inc.

Reston, VA โ€ข On-site

Full-time

Re-posted 18 days ago


Job description

Company Description
Alphalogic is a global technology solutions company headquartered in the Washington, DC metropolitan area. Alphalogic offers a wide range of technology and consulting services; predictive analytics, data warehousing & BI, cloud consulting, web & mobile application development.
Cutting-edge Technologies
Our company's core competencies are cloud and mobile computing; healthcare solutions and services; data warehousing-analytics- business intelligence; and enterprise collaboration-content management. Alphalogic teams are continually deploying emerging technologies to meet our clients' current challenges.
Industry Best Practices
Alphalogic specializes in the effective use of industry-standard frameworks such Agile, for helping our clients achieve quick wins and reduce cycle times.
Job Description
The Senior Software Security Engineer will work within the software engineering organization to translate and define security requirements, use and mature practices for building secure applications; and suggest and support remediation activities for identified vulnerabilities. This position requires interest and expertise in defining and executing on a software engineering security practice; strong proven software development skills; expertise with major software infrastructures (J2EE, .NET, Oracle) and architectures (Web, SOA); an ability to build rapport and credibility with management and software development teams; and the ability to document and communicate the results of code reviews and penetration tests. Successful candidates must be action-oriented self-starters, capable of solving complex technical problems both independently and in a team environment. Candidates must also be able to communicate clearly and effectively to both technical and executive level audiences, both verbally and in written form.
  • Defines and mentors software engineering teams on processes that build security in, such as security related programming standards, use of APIs that support secure coding, code review, use of automated scanning tools, and penetration testing.
  • Works with software engineering teams and Enterprise Architecture (EA) to build out formal product security plans that put in place controls to build security in during the software development life cycle.
  • Stays current with emerging software security technologies, trends, and attack vectors, with a primary focus on internal reference architectures and security standards.
  • Performs/participates in architectural reviews that are meant to identify and remedy architectural security flaws.
  • Responsible for the use of security-related code analysis tools and takes the lead on tuning, enhancements, upgrades, and tool integration.
  • Develops threat models in conjunction with architects and software engineering staff.
  • Oversees the development of misuse/abuse cases in conjunction with requirements analysts.
  • Works with the Information Security Office on incident response and operational/strategic initiatives.

Qualifications
Qualifications
Education/Experience
Bachelor's Degree in a related field plus additional related college courses or professional training. Four to seven years of progressively responsible directly-related experience.
Related Skills & Other Requirements:
  • Strong and evolving competence in several programming languages and technologies, mastery of one or more tools sets, technologies, and implementation environments.
  • Advanced knowledge of programming languages, relational database management systems, networking technology, multiple desk operating systems and multiple server operating systems.
  • Must have strong knowledge in one or more of the following: HTML, JavaScript, DOM, AJAX, CSS/CSS2, XML, XHTML, DHTML, etc.
  • Must have adequate knowledge of J2EE and/or .NET technologies.
  • Experience writing automated unit tests.
  • Experience in performing code reviews.
  • Knowledge of TCP/IP, HTTP/S and other protocols.
  • Knowledge of cross-site scripting (XSS), session hijacking, SQL injection, CSRF (Cross-Site Request Forgery), OWASP Top 10, and other attack vectors a plus.
  • Knowledge of OWASP Web Security Certification Criteria, OWASP testing guidelines and PCI Data Security Standards is a plus.
  • Experience with one or more of the following tools is a plus: nmap, Nessus, Metasploit, TCPDump, Burp Suite, ZAProxy.
  • Experience with IBM AppScan Source Edition, IBM AppScan Standard, and/or HP Fortify is a plus.
  • Experience with the following source code repositories is a plus: SVN, GIT, IBM ClearCase
  • Any knowledge of one or more of the following is a plus -- Python, Ruby, PHP or other scripting languages.
  • Reverse engineering experience is a plus.
  • Protocol analysis and forensic analysis experience is a plus.
  • Experience installing, configuring and maintaining continuous integration (CI) environment(s) using tools such as Cruise Control, Cruise Control.NET, Hudson, Jenkins, Bamboo, Gauntlet, in a test driven development (TDD) process is a plus.
  • Experience with one or more of the following static analysis tools is a plus: FindBugs, FxCop, and PMD.
  • Additional certifications such as CISSP, CSSLP, CEH, ENCE, CCE, GCFA, GCIA, GCIH, CHFI and/or QSA are highly desired.

Additional Information
No C2C or Agency candidates. Local candidates are strongly encouraged to apply.