Application Security Engineer at Careers Decisionpointcorp, Remote

Application Security Engineer at Careers Decisionpointcorp, remote. Full-time. Est. up to $200k. Apply with swipeandhired.

DecisionPoint seeks an Application Security Engineer to perform advanced application-layer security assessments, secure coding reviews, vulnerability analysis, and security integration for enterprise applications supporting a federal and DoD-aligned mission environment. This role ensures secure development practices across CMS components, APIs, integrations, CI/CD pipelines, and custom code.
The Application Security Engineer supports secure coding standards, threat modeling, static and dynamic testing, and secure secrets management. This position plays a critical role in strengthening application-level defenses, reducing vulnerabilities, and ensuring mission systems meet stringent DoD security requirements.
This position is fully remote.

Duties & Responsibilities

The Application Security Engineer will:

• Conduct secure code reviews, focusing on application logic, API endpoints, CMS modules, and backend integrations.

• Perform API security assessments to validate authentication, authorization, data handling, and boundary protections.

• Support CMS hardening by reviewing templates, modules, configurations, and custom components for secure implementation.

• Integrate security requirements into CI/CD pipelines including SAST/DAST tools, dependency scanning, and automated controls.

• Manage secrets handling, encryption policies, and secure storage of API keys, tokens, and credentials.

• Conduct static and dynamic application security testing, vulnerability assessments, and remediation validation.

• Provide secure coding guidance to developers, architects, and product teams.

• Work with DevSecOps and cloud engineers to ensure secure build and deployment patterns.

• Perform threat modeling and recommend mitigations for high-risk application features.

• Review and validate authentication flows, SSO integrations, and identity-related protections.

• Assist with security documentation including test results, remediation plans, and secure configuration records.

• Support continuous monitoring, log analysis, and triage of application-layer security alerts.

• Participate in sprint teams, code review cycles, and architecture discussions to embed security early.

Qualifications

Clearance Requirement
Must hold an active Top Secret clearance, supported by a Tier 5 background investigation.
Education (Required)
Bachelor’s degree in Computer Science, Cyberse