Application Security Engineer

ManTech International seeks an Application Security Engineer to protect mission-critical systems for U.S. defense, intelligence, and federal customers. In this role, you’ll embed security into the SDLC, perform threat modeling, code reviews, and SAST/DAST, and partner with developers and DevOps to remediate vulnerabilities across cloud and on-prem applications. You’ll help define secure coding standards, automate security testing, and support compliance for national security programs in a highly collaborative, mission-driven culture with strong growth, training, and benefits.
Design and implement application security controls across critical systems
Perform code reviews, SAST/DAST, and threat modeling to identify vulnerabilities
Partner with developers and DevOps to embed security into the SDLC
Respond to security findings, drive remediation, and validate fixes
Develop security standards, playbooks, and reusable patterns for engineering teams
Support federal and defense security/compliance requirements
Mentor teams on secure coding and emerging application threats
Application security
Secure SDLC
Threat modeling
Static code analysis (SAST)
Dynamic application security testing (DAST)
OWASP Top 10
Cloud security (AWS/Azure/GCP)
Secure coding (Java/C#/Python/JavaScript)
Vulnerability management
Security automation/DevSecOps
Medical Insurance
Dental Insurance
Vision Insurance
Life Insurance
401k
CISSP
CSSLP
GIAC GWAPT
GIAC GWEB
CEH
Security+
Experience with SAST/DAST tools (e.g., Veracode, Fortify, Burp Suite)
Knowledge of federal/government security standards (e.g., NIST, FedRAMP)