Concept Solutions, LLC (CS) is seeking an
Application Security Engineer to support a mission-critical application modernization program for a Department of War (DoW) customer.
This program will modernize and streamline access across a portfolio of production applications, creating a unified platform with single sign-on, a common user interface, and a repeatable approach to integrating applications-all while maintaining and supporting existing systems.
In this role, you will help strengthen application security by identifying and remediating vulnerabilities, supporting continuous monitoring activities, and collaborating with software development teams to implement secure coding practices.
This is an opportunity to contribute directly to the security and reliability of mission-critical federal applications.
- Identify and remediate security findings across existing production applications, including dependency vulnerabilities, container vulnerabilities, STIG compliance issues, and code-level findings identified through security scans and assessments.
- Maintain accurate and current Plans of Action and Milestones (POA&Ms) for the application portfolio, tracking security findings and remediation progress.
- Collaborate with the Information System Security Engineer (ISSE) to develop and maintain application security evidence supporting continuous monitoring requirements.
- Partner with software development squads to implement secure coding fixes and address vulnerabilities in application codebases.
- Support ongoing application security improvements while ensuring the continued operation and sustainment of production applications.
Requirements
- 4+ years of experience in application security, secure software engineering, or a closely related discipline.
- Hands-on experience identifying and remediating security vulnerabilities in Java or Go (Golang) applications.
- Experience addressing security findings within production software environments.
Preferred Qualifications
- Experience using software vulnerability scanning tools such as Syft, Grype, or similar technologies.
- Familiarity with Security Technical Implementation Guides (STIGs).
- Active Secret security clearance.
Work Location and Schedule
- Location: Hybrid. Reston, VA headquarters and approved remote locations within the United States, with on-site work at Government facilities in Northern Virginia and Maryland as required. Government-furnished equipment is used for all access to Government environments.
- Schedule: Full-time, 40 hours per week, Monday through Friday, with core hours of 9:00 a.m. to 3:00 p.m. Eastern. Work is organized into two-week sprints, with a customer demonstration each sprint.
- Travel: 0-10%, within the Washington, DC metropolitan area.
- Security Requirement: U.S. citizenship required. Must be eligible to obtain and maintain a DoW security clearance. An active Secret clearance or higher is strongly preferred and may allow an earlier start.
- Compensation: $130,000-$150,000 annually, depending on experience.
This position is contingent upon contract award, with an anticipated start in October 2026.
Benefits: Concept Solutions offers a competitive benefits and salary package you would receive from a large company. We offer health, dental, vision and life insurance, as well as a comprehensive 401(k) plan with matching and immediate vesting.
