Application Security Engineer
Looking for a security engineer job in Washington, D.C.? Choose from 23 open roles at 7 employers. Explore real salary data and skills breakdown across remote, hybrid and on-site roles.
Free. No credit card needed.
The titles on this page reflect a wide spread of security disciplines. Application and product security engineers typically design threat models, review code for vulnerabilities, and build controls into software delivery pipelines. Detection and response roles focus on monitoring systems, identifying threats, and building the platforms that support incident handling. Infrastructure and DevOps-adjacent security roles involve hardening cloud environments and managing access controls across multi-cloud setups. Threat intelligence positions require tracking adversary behaviour and feeding findings into defensive programmes.
Several titles carry a public sector or national security flavour, reflecting D.C.'s federal contractor presence โ for instance, the Application Security Engineer at Accenture Federal Services involves securing CI/CD pipelines and software supply chains for federal development teams, with a US citizenship and public trust clearance requirement stated explicitly.
Staff-level titles appear frequently, suggesting many postings seek engineers who can operate with autonomy and influence design decisions, though seniority indicators are absent from a large portion of the listings.
Python is the most widely mentioned skill across these postings, followed by AWS, CI/CD tooling, Kubernetes, and GCP. Multi-cloud familiarity appears broadly relevant. The presence of LLMs and Agents in a notable share of postings points to some roles involving AI system security specifically. These counts reflect mentions in job descriptions and do not indicate that each skill is a formal requirement in every posting. The sample is small, so patterns should be treated as indicative rather than definitive.
Almost all postings on this page specify on-site work, with only a minority indicating hybrid arrangements. No postings state fully remote eligibility. This makes Washington D.C. physical presence a practical expectation for nearly all roles listed here. For hybrid postings, the specific days or flexibility terms are not stated in the fact pack. Candidates should verify exact attendance expectations directly with each employer before applying, as work-mode labels can vary in practice.
Jobs checked 37 minutes ago. ยท Guide reviewed 9 September 2026.
Search by role, company, or anything a posting mentions.