{"schemaVersion":"jobsearcher.job.v1","id":"6331018b6f7d15025043ba93","url":"https://jobsearcher.com/jobs/6331018b6f7d15025043ba93","canonicalUrl":"https://jobsearcher.com/jobs/6331018b6f7d15025043ba93","title":"Application Security Engineer (Full Scope Poly)","description":"About Concept Plus\n\nConcept Plus is a mission-focused technology solutions provider that transforms IT concepts into impactful solutions for federal agencies. Headquartered in Fairfax, VA, we bring the agility, responsiveness, and customer intimacy of a small business combined with the quality and infrastructure of a larger firm.\n\nRecognized as an award-winning Oracle partner, we have delivered innovative solutions across Defense, Intelligence, Civilian, Health IT, and Tribal sectors. Our highly certified experts build systems that drive efficiency, accelerate modernization, and ensure mission outcomes with certainty.\n\nWe offer competitive pay, comprehensive health, dental, and vision insurance, paid life insurance, paid time off, 11 paid holidays, performance bonuses, tuition reimbursement, unlimited training, and the opportunity to thrive in a collaborative, flexible, and innovative environment.\n\nFor more information, visit www.conceptplus.com.\n\nAbout the role\nConcept Plus is seeking a highly experienced and motivated Application Security Engineer for an exciting new contract. This role will be part of a team of Data, Cloud, and Security engineers delivering a cloud-native, centralized platform that provides end-to-end budget traceability. The Application Security Engineer will integrate security throughout the software development lifecycle, partnering with developers and cloud engineers to design, build, assess, and sustain secure mission applications.\n\nWhat you'll do\nThis role will be part of a team of Data, Cloud, and Security engineers delivering a cloud-native, centralized platform that provides end-to-end budget traceability. The Application Security Engineer will integrate security throughout the software development lifecycle, partnering with developers and cloud engineers to design, build, assess, and sustain secure mission applications.\n\nRequired Qualifications\nUS Citizen\nMust possess a TS/SCI security clearance with Polygraph.\nTechnical expertise and hands-on experience in application security, secure software development, software engineering, or DevSecOps, with the ability to apply these skills to Oracle Cloud and customer mission challenges.\nExperience integrating security throughout the software development lifecycle, including secure design and architecture reviews, threat modeling, secure code review, security testing, vulnerability remediation, and release authorization support.\nExperience developing or reviewing applications using Python, JavaScript frameworks, SQL, Shell scripting, PL/SQL, and other programming languages, with a strong understanding of common application vulnerabilities and secure coding practices.\nExperience with application security testing tools and processes, including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), secrets scanning, and container or infrastructure vulnerability scanning.\nExperience building and securing cloud-native applications and services using Kubernetes, containers, Docker, REST APIs, and CI/CD pipelines.\nExperience implementing DevSecOps practices, including automated security controls and testing within build and deployment pipelines.\nExperience with cloud-native security services and controls; Oracle Cloud Infrastructure (OCI) experience is desired.\nKnowledge of security frameworks and standards such as NIST RMF, NIST Secure Software Development Framework, OWASP, DISA STIGs, and applicable federal security requirements.\nExperience securing Oracle RDBMS environments, including database access controls, encryption, auditing, and secure handling of sensitive data.\nAbility to assess, prioritize, document, and communicate application and cloud security risks, findings, and remediation recommendations to both technical and non-technical stakeholders.\nPassion for technology, curiosity, and willingness to continuously learn new security tools, techniques, and approaches for solving complex technical challenges.\nExperience working in an Agile framework.\n8+ years of relevant experience in application security, software engineering, DevSecOps, cybersecurity, or a related technical discipline.\nBachelor’s Degree in engineering, computer science or related technical discipline. Master’s degree preferred.\n\nPreferred Qualifications\nOracle Cloud Infrastructure (OCI) IaaS and/or PaaS certifications are preferred.\nSecurity certifications such as CISSP, CSSLP, Security+, GIAC, CEH, OSCP, or comparable credentials.\nExperience implementing identity and access management, privileged access controls, secrets management, encryption, logging, monitoring, and incident response capabilities in cloud environments.\nExperience with AI technologies for software development and securing AI-enabled applications or development workflows.\nData engineering experience, including securing data validations, business rules, data transformations, and sensitive-data handling.\n\nConcept Plus is an Equal Opportunity Employer. As such, we will give your application full consideration without regard to your race, color, religion, sex, age, national origin, disability, veteran status, sexual orientation, gender identity, or any other classification protected by federal, state, or local law.","company":"Conceptplus","rawCompany":"conceptplus","city":"Reston","state":"VA","isRemote":false,"isActive":false,"createdAt":"2026-08-13T14:36:48.651Z","occupations":[{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Application Security Engineer (Full Scope Poly)","description":"About Concept Plus\n\nConcept Plus is a mission-focused technology solutions provider that transforms IT concepts into impactful solutions for federal agencies. Headquartered in Fairfax, VA, we bring the agility, responsiveness, and customer intimacy of a small business combined with the quality and infrastructure of a larger firm.\n\nRecognized as an award-winning Oracle partner, we have delivered innovative solutions across Defense, Intelligence, Civilian, Health IT, and Tribal sectors. Our highly certified experts build systems that drive efficiency, accelerate modernization, and ensure mission outcomes with certainty.\n\nWe offer competitive pay, comprehensive health, dental, and vision insurance, paid life insurance, paid time off, 11 paid holidays, performance bonuses, tuition reimbursement, unlimited training, and the opportunity to thrive in a collaborative, flexible, and innovative environment.\n\nFor more information, visit www.conceptplus.com.\n\nAbout the role\nConcept Plus is seeking a highly experienced and motivated Application Security Engineer for an exciting new contract. This role will be part of a team of Data, Cloud, and Security engineers delivering a cloud-native, centralized platform that provides end-to-end budget traceability. The Application Security Engineer will integrate security throughout the software development lifecycle, partnering with developers and cloud engineers to design, build, assess, and sustain secure mission applications.\n\nWhat you'll do\nThis role will be part of a team of Data, Cloud, and Security engineers delivering a cloud-native, centralized platform that provides end-to-end budget traceability. The Application Security Engineer will integrate security throughout the software development lifecycle, partnering with developers and cloud engineers to design, build, assess, and sustain secure mission applications.\n\nRequired Qualifications\nUS Citizen\nMust possess a TS/SCI security clearance with Polygraph.\nTechnical expertise and hands-on experience in application security, secure software development, software engineering, or DevSecOps, with the ability to apply these skills to Oracle Cloud and customer mission challenges.\nExperience integrating security throughout the software development lifecycle, including secure design and architecture reviews, threat modeling, secure code review, security testing, vulnerability remediation, and release authorization support.\nExperience developing or reviewing applications using Python, JavaScript frameworks, SQL, Shell scripting, PL/SQL, and other programming languages, with a strong understanding of common application vulnerabilities and secure coding practices.\nExperience with application security testing tools and processes, including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), secrets scanning, and container or infrastructure vulnerability scanning.\nExperience building and securing cloud-native applications and services using Kubernetes, containers, Docker, REST APIs, and CI/CD pipelines.\nExperience implementing DevSecOps practices, including automated security controls and testing within build and deployment pipelines.\nExperience with cloud-native security services and controls; Oracle Cloud Infrastructure (OCI) experience is desired.\nKnowledge of security frameworks and standards such as NIST RMF, NIST Secure Software Development Framework, OWASP, DISA STIGs, and applicable federal security requirements.\nExperience securing Oracle RDBMS environments, including database access controls, encryption, auditing, and secure handling of sensitive data.\nAbility to assess, prioritize, document, and communicate application and cloud security risks, findings, and remediation recommendations to both technical and non-technical stakeholders.\nPassion for technology, curiosity, and willingness to continuously learn new security tools, techniques, and approaches for solving complex technical challenges.\nExperience working in an Agile framework.\n8+ years of relevant experience in application security, software engineering, DevSecOps, cybersecurity, or a related technical discipline.\nBachelor’s Degree in engineering, computer science or related technical discipline. Master’s degree preferred.\n\nPreferred Qualifications\nOracle Cloud Infrastructure (OCI) IaaS and/or PaaS certifications are preferred.\nSecurity certifications such as CISSP, CSSLP, Security+, GIAC, CEH, OSCP, or comparable credentials.\nExperience implementing identity and access management, privileged access controls, secrets management, encryption, logging, monitoring, and incident response capabilities in cloud environments.\nExperience with AI technologies for software development and securing AI-enabled applications or development workflows.\nData engineering experience, including securing data validations, business rules, data transformations, and sensitive-data handling.\n\nConcept Plus is an Equal Opportunity Employer. As such, we will give your application full consideration without regard to your race, color, religion, sex, age, national origin, disability, veteran status, sexual orientation, gender identity, or any other classification protected by federal, state, or local law.","datePosted":"2026-08-13T14:36:48.651Z","dateModified":"2026-08-13T14:36:48.651Z","hiringOrganization":{"@type":"Organization","name":"Conceptplus","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Reston","addressRegion":"VA","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"6331018b6f7d15025043ba93"},"url":"https://jobsearcher.com/jobs/6331018b6f7d15025043ba93"}}