Application Security Engineer

Application Security Engineer

Unlock the secrets of intelligence with MANTECH! Join a dynamic team at the forefront of national security, providing advanced solutions to government intelligence agencies. Since 1968, we've been solving the toughest challenges with groundbreaking tech. Explore thrilling projects in Digital Transformation, Cybersecurity, IT, Data Analytics and Software Development. Elevate your career and make a difference. Your adventure begins now—unleash your potential with MANTECH!

MANTECH seeks a motivated, career and customer-oriented Application Security (AppSec) Engineer to join our team in Hanover, MD.

The Application Security (AppSec) Engineer will leverage their strong technical background and knowledge to support software assurance and security initiatives for a mission-critical organization within the Intelligence Community, focusing on secure and reliable data dissemination through rigorous source code analysis.

Responsibilities include but are not limited to:

• Utilizing, fine-tuning, and evaluating the suitability of automated Software Assurance (SwA) tools for specific customer environments to maximize detection and minimize false positives.
• Interpreting SwA tool results to detect vulnerabilities, triage findings, and drive secure coding practices across the development lifecycle.
• Developing and executing test methodologies, custom scoring criteria, and specific test cases to support and optimize SwA tool analysis.
• Performing software security assessments and interfacing with clients and developers to recommend effective remediation strategies for identified code vulnerabilities.
• Creating technical documentation, comprehensive vulnerability test reports, and risk assessments for leadership.
• Researching and assessing emerging SwA tools and methodologies to continually enhance the team's software security analysis capabilities.

Minimum Qualifications:

• 12+ years of professional experience (or 10+ years with a Bachelor's degree, or 8+ years with a Master's degree) in Systems Security Engineering, Software Programming, or Computer Science.
• Strong, hands-on experience in C/C++ or C#, with the ability to read/analyze Java.

Preferred Qualifications:

• Experience with technology tools including Klocwork, CodeSonar, Fortify, CodePeer, IDA Pro, or Fortran-Lint.
• Experience with low-level architectures (x86_64, PowerPC, MIPS), assembly language (ASM), or legacy languages like Ada.
• Experience with Rust and/or the ability to learn.

Clearance Requirements:

• An active TS/SCI with Polygraph.

Physical Requirements:

• Must be able to remain in a stationary position 50% of the time.
• Needs to occasionally move about inside the office to access file cabinets, office machinery, and constant operation of a computer.
• Frequently communicates with co-workers, management, and customers, which may involve delivering presentations.
• Must be able to exchange accurate information in these situations

The projected compensation range for this position is $141,500.00-$236,000.00. There are differentiating factors that can impact a final salary/hourly rate, including, but not limited to, relevant work experience, skills and competencies that align to the specified role, geographic location (For Remote Opportunities), education and certifications as well as Federal Government Contract Labor categories. In addition, MANTECH invests in its employees beyond just compensation. MANTECH's benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, short-term and long-term Disability, Retirement and Savings, Learning and Development opportunities, wellness programs as well as other optional benefit elections. MANTECH considers all qualified applicants for employment without regard to disability or veteran status or any other status protected under any federal, state, or local law or regulation. If you need a reasonable accommodation to apply for a position with MANTECH, please email us at and provide your name and contact information.