Application Security Architect & Engineer

Description

We are looking for an experienced Application Security Architect & Engineer to join our team on a contract basis in Richmond, Virginia. In this role, you will collaborate closely with application teams to embed security into all stages of the software development lifecycle, ensuring compliance and the implementation of secure coding practices. This position offers an opportunity to make a significant impact by improving the security posture of critical applications while working in a dynamic environment.

Responsibilities:
Provide comprehensive security guidance and training to development and operations teams to enhance secure software practices.
Evaluate application architecture and design to identify security risks and align them with DevSecOps principles.
Promote and enforce secure coding standards across diverse programming languages such as JavaScript, Java, and C#.
Conduct detailed reviews of source code to identify vulnerabilities and recommend effective remediation strategies.
Assess and secure modern web application frameworks, including cloud technologies, APIs, microservices, and client-server models.
Utilize application security testing tools and platforms, such as Accunetix, Veracode, Jenkins, Splunk, Rapid7, and Tenable, to identify and address security weaknesses.
Ensure compliance with relevant security regulations and standards, including NIST 800-53 and IRS Pub 1075.
Develop and maintain System Security Plans (SSPs) to document security policies and procedures effectively.
Collaborate with cross-functional teams, including QA engineers and operations staff, to integrate security measures into workflows.
Stay updated on emerging threats, technologies, and industry trends to continuously improve security practices.

Requirements

Minimum of 5 years of experience in application security or a related field.
Strong understanding of secure coding practices and vulnerability management.
Proficiency in programming languages such as JavaScript, Java, C#, and SQL.
Familiarity with Agile and Scrum methodologies to support secure software development.
Experience with modern web application architectures, including cloud technologies and APIs.
Expertise in using application security tools like Accunetix, Veracode, and Splunk.
Knowledge of compliance standards such as NIST 800-53 and IRS Pub 1075.
Excellent communication skills to convey technical concepts to both technical and non-technical audiences.

Technology Doesn't Change the World, People Do.

Robert Half is the world's first and largest specialized talent solutions firm that connects highly qualified job seekers to opportunities at great companies. We offer contract, temporary and permanent placement solutions for finance and accounting, technology, marketing and creative, legal, and administrative and customer support roles.

Robert Half works to put you in the best position to succeed. We provide access to top jobs, competitive compensation and benefits, and free online training. Stay on top of every opportunity - whenever you choose - even on the go. Download the Robert Half app and get 1-tap apply, notifications of AI-matched jobs, and much more.

All applicants applying for U.S. job openings must be legally authorized to work in the United States. Benefits are available to contract/temporary professionals, including medical, vision, dental, and life and disability insurance. Hired contract/temporary professionals are also eligible to enroll in our company 401(k) plan. Visit roberthalf.gobenefits.net for more information.

2025 Robert Half. An Equal Opportunity Employer. M/F/Disability/Veterans. By clicking "Apply Now," you're agreeing to Robert Half's Terms of Use and Privacy Notice.