CACI International Inc
AppSec Engineer
Rol remoto de Application Security con fit claro de ubicación del candidato.
Publicado18 jul 2026
Países elegibles1 país aceptado
Señal de seniorityMiddle
Modelo de trabajoRemoto
Ubicaciones aceptadas para candidatos
Estados Unidos
Resumen del rol
AppSec Engineer
Requisitos y responsabilidades
Contenido del rol extraído en secciones para revisar más rápido.
REMOTE!Responsibilities:
- Lead SAST operations using Fortify, including full ownership of findings triage and remediation tracking
- Oversee SonarQube continuous code security analysis and quality gate governance
- Manage and execute DAST testing and runtime vulnerability assessments
- Plan, lead, and deliver penetration testing engagements across varied application stacks
- Lead secure code reviews and coach developers on remediation techniques
- Own application vulnerability remediation tracking, verification, and closure
- Develop and maintain standards for AppSec assessments and penetration test reporting
- Drive secure development lifecycle (SDLC) compliance across assigned application portfolios
- Mentor junior and mid‑level AppSec engineers, fostering technical growth and excellence
- Serve as the AppSec liaison to the Cybersecurity Architect to advance program‑wide SDLC security strategy
REMOTE!Responsibilities:
- Active Secret clearance
- 6–9 years of experience in application security, penetration testing, or secure software development
- Advanced proficiency with Fortify and SonarQube
- Demonstrated experience leading penetration testing engagements and performing secure code reviews
- Strong knowledge of web application, API, and mobile application vulnerabilities
- Proven ability to mentor and develop junior AppSec engineers
Details
- DoD 8140.03M DCWF Intermediate Tier certification — one of: CEH(P), RCCE Level 1, Cloud+, CPTE, FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security+
- Bachelor’s degree in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering
- DoD 8140.03M DCWF Advanced Tier certification — one of: CFR, CISA, CISM, CySA+, GPEN, or GSNA
- Master’s or Ph.D. in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering
REMOTE!Responsibilities:
- Multiple DoD 8140.03M DCWF Advanced Tier 541 certifications
- OSCP or equivalent offensive security certification
- Experience integrating security into DevSecOps pipelines
- Prior experience developing AppSec programs or secure coding standards within a DoD environment
Roles similares
Mantén una lista de respaldo.
Stack
Usa estas tags para comparar roles remotos similares.
Elegibilidad de ubicación
Candidatos deberían aplicar solo cuando el país del perfil aparece aquí.
Tu perfilPaís no definidoInicia sesión para comparar tu país con este rol.
Flujo de contratación
WithMira muestra el rol y luego envía candidatos a la aplicación de la empresa.
1Revisa fit del rol, stack y elegibilidad de ubicación en WithMira.
2Abre la página de aplicación de la empresa desde el link rastreado.
3Guarda el rol o suscríbete a oportunidades similares antes de salir.