Application Security Engineer – Software Vulnerability Remediation

Concept Solutions, LLC

. Identify and remediate security findings across existing production applications .

Posted 10/13/2026full-timeUnited StatesMid-LevelSenior💰 $130,000 - $150,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application security, including identifying and remediating vulnerabilities in Java and Go applications, while maintaining compliance with Security Technical Implementation Guides (STIGs). Proven ability to collaborate with development teams to implement secure coding practices and track security findings effectively.

Highest-signal resume keywords

Application SecuritySecure Software EngineeringJava Application Vulnerability RemediationGo (Golang) Application SecuritySecurity Vulnerability Scanning Tools

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Application SecuritySecure Software EngineeringVulnerability RemediationJavaGo (Golang)Security Technical Implementation Guides (STIGs)Security Findings TrackingPlans of Action and Milestones (POA&Ms)Secure Coding PracticesContinuous Monitoring

Soft Skills

CollaborationProblem-SolvingCommunication

Tools & Technologies

SyftGrypeSoftware Vulnerability Scanning Tools

Certifications & Qualifications

Active Secret Security ClearanceDoW Security Clearance Eligibility

Industry Keywords

Security ComplianceProduction ApplicationsDependency VulnerabilitiesContainer VulnerabilitiesCustomer DemonstrationSprints

Tech Stack

Tools & technologies

JavaGo

About the role

Key responsibilities & impact

Identify and remediate security findings across existing production applications
Address dependency vulnerabilities, container vulnerabilities, STIG compliance issues, and code-level findings from security scans and assessments
Maintain accurate and current Plans of Action and Milestones (POA&Ms) for the application portfolio
Track security findings and remediation progress
Collaborate with the Information System Security Engineer (ISSE) to develop and maintain application security evidence for continuous monitoring requirements
Partner with software development squads to implement secure coding fixes and address vulnerabilities in application codebases
Support ongoing application security improvements while ensuring continued operation and sustainment of production applications
Work in two-week sprints and participate in a customer demonstration each sprint

Requirements

What you’ll need

4+ years of experience in application security, secure software engineering, or a closely related discipline
Hands-on experience identifying and remediating security vulnerabilities in Java or Go (Golang) applications
Experience addressing security findings within production software environments
Experience using software vulnerability scanning tools such as Syft, Grype, or similar technologies preferred
Familiarity with Security Technical Implementation Guides (STIGs) preferred
Active Secret security clearance strongly preferred
U.S. citizenship required
Must be eligible to obtain and maintain a DoW security clearance
Ability to work full-time, 40 hours per week, Monday through Friday, with core hours of 9:00 a.m. to 3:00 p.m. Eastern
Willingness to work on-site at Government facilities in Northern Virginia and Maryland as required
Willingness to travel 0–10% within the Washington, DC metropolitan area

Benefits

Comp & perks

Health insurance
Dental insurance
Vision insurance
Life insurance
Comprehensive 401(k) plan with matching and immediate vesting
Positive culture centered on innovation, engagement, and career development