Veilant is looking for an Application Security Engineer to join our InfoSec team and help validate, secure, and continuously improve software developed by internal and partner engineering teams.
This role is ideal for someone who combines a software engineering foundation with an attacker mindset. You will review major and minor software releases before deployment, identify and validate vulnerabilities, create proof-of-concept demonstrations where appropriate, and provide practical remediation guidance that developers can act on.
You will not simply file security tickets and move on. You will work closely with engineering teams to understand application architecture, business logic, user workflows, data sensitivity, and production environments so that your findings are accurate, contextualized, and useful.
You will work collaboratively across Veilant’s software, DevSecOps, and infrastructure teams.
In this role, you will:
- Audit software releases across major and minor cycles to intercept and remediate security flaws before deployment.
- Analyze source code to identify, isolate, validate, and contextualize vulnerabilities in complex application codebases.
- Build safe proof-of-concept examples to demonstrate exploitation paths and verify the real-world impact of discovered risks.
- Contextualize findings based on application business logic, user workflows, data sensitivity, and production use cases.
- Author clear remediation guidance and partner with development teams to implement effective patches, controls, or architectural mitigations.
- Intercept and analyze application-layer network traffic using tools such as Burp Suite or similar intercepting proxies to inspect encrypted payloads, API calls, and authentication flows.
- Assess and help secure core architectures across REST APIs, SQL databases, PostgreSQL, JWT/OAuth, identity providers, and token-based authentication mechanisms.
- Perform threat modeling for web applications based on use cases, data flows, user roles, trust boundaries, and production environments.
- Improve DevSecOps pipelines by integrating, tuning, and operationalizing SAST, DAST, SCA, IaC scanning, secrets detection, and container security tooling.
- Support container runtime security efforts using monitoring and runtime protection tools such as Falco, NeuVector, or similar technologies.
- Create standardized security reporting that translates technical findings into clear risk narratives for both engineering teams and executive stakeholders.
What You Will Accomplish in Your First Six Months
Within your first six months, success in this role will look like:
Building a repeatable AppSec review process for major and minor software releases, helping engineering teams identify and resolve security issues before deployment.
Integrating and improving SAST, DAST, and SCA checks in CI/CD pipelines so that security testing becomes a reliable part of the development lifecycle rather than a late-stage blocker.
Establishing threat modeling practices for web applications using common frameworks and applying them to Veilant’s Angular front-end, Java Spring Boot back-end, REST APIs, SQL databases, and authentication flows.
Partnering with engineering and software teams to improve secure coding practices through practical feedback, remediation guidance, and collaborative reviews.
Implementing best practices in container runtime security, including visibility, monitoring, and runtime protections for containerized workloads.
Writing standardized security reports that clearly communicate risk, impact, and remediation steps for both executive-level stakeholders and engineering teams.
Apply on company website Tysons, VA, USA Hybrid Full-time
Ridgeline International is hiring an Application Security Engineer
About company
We're a tech company that was first on the ground in the fight against Ubiquitous Technical Surveillance. We help our government and enterprise customers solve a big problem they sometimes don't even know they have. To become leaders in this space, we've relied heavily on curiosity, creativity, and flexibility. We iterate until we get things right and innovate to get there faster.But enough about us. What's in it for you?We work hard and do fun things.Apart from a constantly growing list of fascinating challenges to solve, Ridgeline offers a solid work-life balance, flexible remote work options, and a culture that values teamwork over competition. At Ridgeline, you will work with the most talented software developers, systems engineers, and subject matter experts to change how big enterprises and the U.S. Government manage their digital signatures.
Job Description: We are at the forefront of delivering innovative solutions to the federal government. We are looking for a seasoned Subcontracts and Agreements Administrator with a background in federal contracting, to include subcontracts, to join our dynamic team. If you have a passion for navigating complex contracts and are eager to make an impact, this is the role for you. This role will focus on the administration and management of our subcontracts portfolio, including federal subcontracts, commercial partner and vendor agreements, and independent contractor agreements.
At Ridgeline, we value proactive problem-solvers who thrive in collaborative environments. Here, your expertise in federal contracting, subcontracts, and contractor agreements will be instrumental in driving our success. You’ll be part of a team that supports critical government programs, where your contributions are both recognized and valued.
As a Contracts Administrator, you will:Lead Subcontract Management: Oversee the full subcontract lifecycle, from proposal through closeout, ensuring compliance with federal regulations and company policies.Collaborate Across Teams: Work closely with program managers, finance, legal, and business development to address contractual requirements and provide strategic advice.Negotiate and Execute: Handle NDAs, Teaming Agreements, Service Agreements, and Purchase OrdersEnsure Compliance: Maintain contract files and records in Deltek Costpoint, and manage day-to-day contract actions, preparing official correspondence and deliverables.What You Will Achieve Within the First YearIn your first 6 months, you will:Master the Portfolio: Rapidly gain a comprehensive understanding of Ridgeline’s subcontracts, agreements portfolio, and all associated compliance and operational processes.Take Ownership: Transition to full administrative ownership of Ridgeline’s subcontracts and Independent Contractor (IC) processes, ensuring accuracy and efficiency.Build Strategic Partnerships: Establish trusted relationships with key internal stakeholders, specifically Program Managers and Project Managers, to ensure alignment on contract execution.By the end of your first year, you will:Scale Your Impact: Demonstrate readiness to expand your scope of responsibility by taking on additional portfolio management duties and complex agreement structures as business needs evolve.Drive Process Optimization: Proactively identify opportunities to streamline subcontract administration
Qualifications: Must-Haves:Security Clearance: Active Secret clearance preferred.Experience: 3-5 years of relevant experience in federal contracting, with a strong understanding of the Federal Acquisition Regulation (FAR), along with experience in subcontract administration and commercial partner agreementsEducation: Bachelor’s degree (additional experience may be considered in lieu of a degree).Technical Skills: Proficiency in Microsoft Office and experience with Deltek Costpoint.Location: Hybrid position with 3-4 days in our Tysons Corner, VA office required; Ability to attend in-person meetings in the National Capital Region.Nice-to-Haves:CostPoint Expertise: Experience with CostPoint Project Setup.Certifications: Professional certifications such as CPCM or CFCM.
Additional Information: Why You’ll Love Working Here:Innovative Environment: Work in a setting where your ideas and expertise are valued.Collaborative Culture: Be part of a team that supports each other and works toward shared goals.Career Growth: Opportunities for professional development and career advancement.Here are some Perks of being a Ridgeliner!* Flexible PTO + holidays
* Generous 401k match benefit up to 10%, with an automatic 3% safe harbor contribution and additional matching based on employee contributions.
* Medical (HSA & PPO Plans Available), dental, vision, disability, and life insurance
* Employer Contribution to Health Savings Account (HSA)
* Learning & Development opportunities
* Professional coaching services
* Get the technology you want to do your job
* We have free daily snacks & drinks
Physical Requirements:* Must be able to remain in a stationary position 50% of the time. The person in this position needs to occasionally move about inside the office
* Constantly work with computers and other information technology equipment
* The ability to communicate information and ideas in a classroom style format, may stand at a podium for long periods of time
We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, veteran status, or any other characteristic protected by law. We are proud to be an equal opportunity workplace.If you require a reasonable accommodation to apply for a position with Ridgeline International through its online applicant system, please contact Ridgeline's Talent Management Department at (703) 544-2424 or contact us through e-mail at contact_us@ridgelineintl.com
All jobs at Ridgeline International Visit website