Vector Consulting, Inc
Vector Consulting, Inc

Application Security Engineer

Hybrid in Richmond, VA, US • Posted 15 hours ago • Updated 15 hours ago
Contract W2
Hybrid
Depends on Experience
Fitment

Dice Job Match Score™

🔗 Matching skills to job...

Job Details

Skills

  • Networking_InfoSec
  • Networking_Firewall/Security

Summary

Our government client is looking for an Application Security Engineer on a hybrid 6+ months renewable contract role in Richmond, VA.

Position – Application Security Engineer

ABOUT THE ROLE
Agency is seeking an Application Security Engineer (ASE) with 5+ years of experience to join the Office of Technology under Joint Security Operations. In this role, the ASE serves as a dedicated security partner to application teams, providing guidance on secure design, vulnerability management, and secure development practices. The ASE works collaboratively across the SDLC to ensure security is embedded into application design, development, testing, and deployment. This includes supporting compliance requirements, delivering training and education, and assisting teams with vulnerability remediation efforts.
  • The successful candidate will identify and recommend improvements to improve the security of all Virginia Tax applications, promote secure coding and development practices, and contribute to ongoing initiatives that reduce risk and strengthen the agency’s overall security posture.
Responsibilities include but not limited to:
  • Provide security guidance, training, and best practices for development and operations teams.
  • Support secure software development by applying knowledge of SDLC, Agile, and Scrum methodologies.
  • Evaluate software architecture and design for security risks and alignment with DevSecOps principles.
  • Promote and enforce secure coding standards and guidelines.
  • Review source code to identify vulnerabilities and recommend remediation strategies.
  • Assess security risks across multiple programming languages (e.g., JavaScript, C#, Java, Ruby, SQL).
  • Analyze and secure modern web application architectures, including cloud, APIs, microservices, and client–server models.
  • Identify and address common vulnerabilities, including those outlined in the OWASP Top 10.
  • Support vulnerability remediation, patch management, and continuous improvement efforts.
  • Utilize application security testing tools such as SAST, DAST, IAST, and platforms like Accunetix, Veracode, Jenkins, Splunk, Rapid7, and Tenable.
  • Interpret and act on findings from SIEM systems, including Splunk.
  • Apply knowledge of common security controls and frameworks.
  • Ensure compliance with relevant security regulations and standards (e.g., NIST 800?53, IRS Pub 1075, PCI?DSS).
  • Implement and evaluate AWS cloud security controls and best practices.
  • Create, maintain, and review System Security Plans (SSPs).
  • Troubleshoot and resolve complex technical and security-related issues.
  • Stay current with evolving threats, technologies, and industry trends.
  • Develop detailed plans and communicate risks, impacts, and recommendations effectively.
  • Collaborate with application teams, QA engineers, and operations teams to integrate security into workflows.
  • Provide constructive, actionable feedback to application teams.
  • Communicate technical concepts clearly to both technical and non?technical audiences.
  • Work closely with other security analysts and technology teams to support agency and enterprise security initiatives.
  • Manage multiple tasks, prioritize effectively, and meet deadlines.
  • Apply critical thinking to evaluate and mitigate security risks and vulnerabilities.
  • Required Skills/Experience:
    • Five or more years’ experience in application security.
    • Two or more years’ network or firewall/AWS Security Groups.
    • Experience with log collection, vulnerability scans and remediation, or privileged access management.
    • Strong understanding of security concepts, network protocols, and threat vectors.
    • Proficiency in SIEM,IDS/IPS, EDR,and other relevant security tools.
    • Excellent analytical and problem-solving skills.
    • Strong communication, collaboration, and documentation skills.
    • Ability to work independently and as part of a team in a fast-paced environment.

Have experience and a strong knowledge of the following:
    • Splunk, Insigh tVM Rapid7, Tenable, CyberArk, Jenkins, Veracode
    • Linux and Windows Operating Systems, Baseline hardening of operating systems
    • IIS and Apache, Scripting Languages and SQL, PowerShell, Firewall
At least one of these certs below is REQUIRED:
      • CompTIA Security+
      • ISC2 CC (Certified in Cybersecurity)
      • Offensive Security Certified Professional (OSCP)
      • CCSP (Certified Cloud Security Professional)
      • CSSLP (Certified Secure Software Lifecycle Professional)
 At least one of these certs below is highly DESIRED (Independently and or with one of the above)
      • AWS Solutions Architect (Associate/Professional)
      • AWS Security Specialty
 At least one of the any is DESIRED
      • CompTIA PenTest+
      • Certified Ethical Hacker (CEH), GIAC Certified Intrusion Analyst (GCIA
Required/Desired Experience:
  • 5 years of Application Security Required
  • 2 years of Network or Firewall/AWS security Groups Required
  • 2 years of Infrastructure as Code (IaC): Advanced proficiency in Terraform for multi-account landing zones and automated provisioning Required
  • 4 years of Experience with log collection, vulnerability scans and remediation, or privileged access management Required
  • 4 years of Proficiency in SIEM, IDS/IPS, EDR, and other relevant security tools. Required
  • 5 years of Networking & Hybrid Connectivity: Solid understanding of routing, firewalls, AWS Direct Connect, and VPNs in a hybrid cloud environment Required
  • One REQUIRED: CompTIA Security+, ISC2 CC (Certified in Cybersecurity), Offensive Security Certified Professional (OSCP), CCSP, or CCLP. UPLOAD COPY!! Required
  • 5 years of CI/CD & DevOps: Experience with GitLab CI/CD, Jenkins, or AWS CodePipeline for automated, secure deployments. Highly desired
  • 2 years of Splunk, InsightVM Rapid7, Tenable, CyberArk, Jenkins, Veracode Highly desired
  • 2 years of Linux and Windows Operating Systems, Baseline hardening of operating systems Highly desired
  • 2 years of IIS and Apache, Scripting Languages and SQL, PowerShell, Firewall Highly desired
  • One highly DESIRED (Independently and or with one of the above): AWS Solutions Architect (Associate/Professional) or AWS Security Specialty Highly desired
  • One of these is DESIRED: CompTIA PenTest+, Certified Ethical Hacker (CEH), or GIAC Certified Intrusion Analyst (GCIA)
  • Highly desired
About Vector:
Vector Consulting, Inc., (Headquartered in Atlanta) is an IT Talent Acquisition Solutions firm committed to delivering results. Since our founding in 1990, we have been partnering with our customers, understanding their business, and developing solutions with a commitment to quality, reliability and value. Our continuing growth has been and continues to be built around successful relationships that are based on our organization''s operating philosophy and commitment to ** People, Partnerships, Purpose and Performance - THE VECTOR WAY

“Celebrating 30 years of service.”
#LI-SP1
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
  • Dice Id: vector
  • Position Id: 21799
  • Posted 15 hours ago
Create job alert
Set job alertNever miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

APPLICATION SECURITY ENGINEER (ASE) - MUST BE VA RESIDENT - CONTRACT-TO-HIRE

Remote or Hybrid in Richmond, Virginia

•

Yesterday

Easy Apply

Contract

Depends on Experience

Application Security Architect & Engineer (Contract To HIRE)

Hybrid in Richmond, Virginia

•

Yesterday

Easy Apply

Contract

Depends on Experience

Application Security Architect & Engineer

Richmond, Virginia

•

Today

Easy Apply

Full-time, Part-time, Contract, Third Party

Application Security Architect & Engineer

Hybrid in Richmond, Virginia

•

Yesterday

Easy Apply

Contract

Depends on Experience

Search all similar jobs