Application Security Engineer - Software Vulnerability Remediation

Description

Concept Solutions, LLC (CS) is seeking an

Application Security Engineer

to support a mission-critical application modernization program for a Department of War (DoW) customer.
This program will modernize and streamline access across a portfolio of production applications, creating a unified platform with single sign-on, a common user interface, and a repeatable approach to integrating applications—all while maintaining and supporting existing systems.
In this role, you will help strengthen application security by identifying and remediating vulnerabilities, supporting continuous monitoring activities, and collaborating with software development teams to implement secure coding practices.
This is an opportunity to contribute directly to the security and reliability of mission-critical federal applications.
Identify and remediate security findings across existing production applications, including dependency vulnerabilities, container vulnerabilities, STIG compliance issues, and code-level findings identified through security scans and assessments.
Maintain accurate and current Plans of Action and Milestones (POA&Ms) for the application portfolio, tracking security findings and remediation progress.
Collaborate with the Information System Security Engineer (ISSE) to develop and maintain application security evidence supporting continuous monitoring requirements.
Partner with software development squads to implement secure coding fixes and address vulnerabilities in application codebases.
Support ongoing application security improvements while ensuring the continued operation and sustainment of production applications.
4+ years of experience in application security, secure software engineering, or a closely related discipline.
~ Hands-on experience identifying and remediating security vulnerabilities in Java or Go (Golang) applications.
~ Experience addressing security findings within production software environments.
~ Active Secret security clearance.

Experience using software vulnerability scanning tools such as Syft, Grype, or similar technologies.
Familiarity with Security Technical Implementation Guides (STIGs).
Reston, VA headquarters and approved remote locations within the United States, with on-site work at Government facilities in Northern Virginia and Maryland as required. Government-furnished equipment is used for all access to Government environments.
Schedule: Full-time, 40 hours per week, Monday through Friday, with core hours of 9:00 a.m. Work is organized into two-week sprints, with a customer demonstration each sprint.
Travel: 0–10%, within the Washington, DC metropolitan area.
Must be eligible to obtain and maintain a DoW security clearance. An active Secret clearance or higher
We are the innovative and agile force behind strategic solutions that enhance organizational efficiency and safeguard our nation across Aerospace, Defense, and National Security sectors.
For over 25 years, CS has been a trusted partner for the Federal Aviation Administration (FAA), Department of Homeland Security (DHS), Department of Justice (DOJ), Department of Defense (DoD) and other federal agencies delivering vital IT, security, and project management services.
Over two decades of experience across over $300 million in contract awards supporting critical FAA programs
Multiple contract vehicles providing opportunities across FAA, DoD, NOAA, and other Federal agencies
We offer health, dental, vision and life insurance, as well as a comprehensive 401(k) plan with matching and immediate vesting.
Concept Solutions is an Equal Opportunity Employer, and we value workplace diversity. We invite resumes from all interested parties and consider applicants for all positions without regard to race, color, religion, sex, national origin, age, marital status, sexual preference, personal appearance, family responsibility, the presence of a non-job-related medical condition or physical disability, matriculation, political affiliation, veteran status, or any other legally protected status. Concept Solutions is a VEVRAA federal contractor, and we request priority referral of veterans for available positions.