Application Security Engineer - Public Trust/Secret Clearance
Company: TOMORROW HIRE
Location: Washington (Remote)
Type: Full-time
Remote: Yes
Posted: 2026-04-10
About this role
Application Security Engineer
Location: Fully Remote (East Coast)
Clearance: Public Trust, Secret Clearance preferred
Employment Type: Full-time
Salary: $120,000-$140,000
Role Overview:
The Application Security Engineer will support the secure development and testing of applications by leveraging specialized tools, implementing security controls, and ensuring compliance with federal standards. This role involves hands-on work with application security testing (SAST, DAST, IAST), vulnerability management, secure coding practices, and collaboration with development teams to protect enterprise web applications in a federal environment.
Responsibilities:
- Support Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and IDE Plug-in environments using Veracode and Burp Suite.
- Design and implement enterprise-wide security controls to secure applications, systems, networks, or infrastructure services.
- Secure enterprise web applications, with a focus on mitigating OWASP Top 10 risks, CVSS scoring, CWE, WASC, and SANS Top 25 vulnerabilities.
- Integrate security practices into development workflows using IDEs such as Eclipse, JDeveloper (including pipeline development), or Visual Studio.
- Perform application security testing and automation using tools such as OWASP ZAP, Burp Proxy, Selenium, and Interactive Application Security Testing (IAST) capabilities.
- Write and maintain bash scripts to support security automation, testing, and troubleshooting tasks.
- Participate in vulnerability discovery, triage, and remediation processes, including crowdsourced security programs via platforms like HackerOne.
- Work in Linux or UNIX environments, including navigating file systems and troubleshooting basic website connectivity and security issues.
- Ensure applications and security practices align with federal compliance standards, including NIST 800-53, FIPS, or FedRAMP.
### Requirements
- Minimum **6+ ...