AppSec Engineer

Job not on LinkedIn

🕒 July 15

🌽 Illinois – Remote

🌽 Illinois – Remote

💵 $75.2k - $158.1k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👷🏻‍♀️ Engineer

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CACI International Inc

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1962

💼 Consulting

🎖️ Defense

Consulting • Defense • IT

CACI International Inc is a diversified company that provides a wide range of services and solutions primarily to the U. S. government and commercial sectors. CACI specializes in offering security services, IT solutions, and intelligence support, helping clients enhance their cyber capabilities and secure their networks. The company is recognized for its innovative workforce and the technology it provides to clients in enterprise and mission-critical environments. CACI is committed to diversity and inclusion, offering an array of career opportunities for both new graduates and experienced professionals, including veterans.

📋 Description

• Join a mission‑driven DoD program where your expertise in application security directly strengthens national defense. • Lead SAST operations using Fortify, including full ownership of findings triage and remediation tracking • Oversee SonarQube continuous code security analysis and quality gate governance • Manage and execute DAST testing and runtime vulnerability assessments • Plan, lead, and deliver penetration testing engagements across varied application stacks • Lead secure code reviews and coach developers on remediation techniques • Own application vulnerability remediation tracking, verification, and closure • Develop and maintain standards for AppSec assessments and penetration test reporting • Drive secure development lifecycle (SDLC) compliance across assigned application portfolios • Mentor junior and mid‑level AppSec engineers, fostering technical growth and excellence • Serve as the AppSec liaison to the Cybersecurity Architect to advance program‑wide SDLC security strategy

🎯 Requirements

• Active Secret clearance • 6–9 years of experience in application security, penetration testing, or secure software development • Advanced proficiency with Fortify and SonarQube • Demonstrated experience leading penetration testing engagements and performing secure code reviews • Strong knowledge of web application, API, and mobile application vulnerabilities • Proven ability to mentor and develop junior AppSec engineers • DoD 8140.03M DCWF Intermediate Tier certification — one of: CEH(P), RCCE Level 1, Cloud+, CPTE, FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security+ • Bachelor’s degree in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering

🏖️ Benefits

• healthcare • wellness • financial • retirement • family support • continuing education • time off benefits