Application Security Engineer

ManTech International seeks an Application Security Engineer to protect mission-critical defense and aerospace systems within our IT & Cybersecurity organization. In this role, you will embed security throughout the SDLC, conduct threat modeling, SAST/DAST, and secure code reviews, and guide developers in remediating vulnerabilities. You will help design secure architectures for cloud and enterprise applications, support compliance with NIST, DoD, and OWASP standards, and automate security in CI/CD pipelines. Join a mission-focused, collaborative team advancing national security while growing your technical expertise through robust training and career development programs.
Embed security into the software development lifecycle for defense and aerospace applications.
Perform threat modeling, code review, SAST/DAST, and security assessments of web, API, and cloud services.
Identify, triage, and track vulnerabilities, guiding teams on secure remediation.
Develop and maintain secure coding standards, patterns, and automation in CI/CD pipelines.
Collaborate with cross-functional IT and cybersecurity teams to meet NIST, DoD, and OWASP requirements.
Produce clear security documentation, risk reports, and recommendations for stakeholders.
Application security
Secure SDLC
Threat modeling
Static code analysis (SAST)
Dynamic application testing (DAST)
Secure code review
Vulnerability management
Cloud security (AWS/Azure/GCP)
DevSecOps tools (SCA, CI/CD security)
Security standards (NIST, OWASP, DoD)
Medical Insurance
Dental Insurance
Vision Insurance
Life Insurance
401k
Security certifications such as CISSP, CSSLP, GWEB, CEH, or GPEN preferred.
Eligibility for U.S. government security clearance (active clearance strongly preferred).
Experience with NIST, DoD, or other federal cybersecurity frameworks.
Hands-on experience with SAST/DAST, SCA, and CI/CD security tooling.