Security Engineer
Kayak
Application Security Engineer (R-00233)
truezerotech· Application Engineering Team
About this role
True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM–$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025, a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence.
The Application Security Engineer Senior leads complex application security engineering and sustainment work for CBP systems. The engineer provides technical direction for application baselines, authorization support, logging and monitoring, configuration control, emerging-technology evaluation, and lifecycle risk reduction.
Job Responsibilities
- Lead the administration, configuration, maintenance, tuning, and security of CBP application systems throughout the software lifecycle.
- Create and maintain application operations and maintenance procedures, tuning guidance, and software maintenance recommendations.
- Support ISSOs during ATO and ATT activities by producing and maintaining required application security documentation and evidence.
- Perform weekly application security impact assessments and evaluate proposed software, products, and emerging technologies.
- Maintain continuous application monitoring, critical-incident alerting, operational status reporting, and service-request tracking.
- Apply configuration management and change-control procedures to application baselines, configuration items, engineering changes, and deployment records.
- Improve application logging, integrate relevant data with SIEM and vulnerability-management processes, and support remediation tracking.
Job Qualifications
- Minimum 7 years of relevant application security or security engineering experience.
- Demonstrated ability to lead application security operations, lifecycle management, configuration control, logging, monitoring, and vulnerability-remediation efforts.
- Advanced experience supporting ATO or ATT activities, security impact assessments, product evaluations, change approvals, and operational risk decisions.
- Strong written and oral communication skills for technical recommendations, procedures, status reporting, and coordination with ISSOs and Government leads.
We’re actively searching for talented security and technology practitioners who are ready to experience the True Zero difference. As a True Zero team member, you'll enjoy:
- Competitive salary, paid twice per month
- Best in class medical coverage
- 100% of medical premiums covered by True Zero
- Company wide new business incentive programs
- Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)
- 3 weeks of PTO starting + 11 Paid Holidays Annually
- 401k Program with 100% company match on the first 4%
- Monthly reimbursement of Cell Phone and Home Internet costs
- Paternity/Maternity Leave
- Investment in training and certifications to broaden and deepen your technical skills
Frequently Asked Questions
Is the salary disclosed for the Application Security Engineer (R-00233) position at truezerotech?
The salary for this Application Security Engineer (R-00233) role at truezerotech is not publicly listed. Click "Apply Now" to learn more about the compensation package on their official careers page.
Where is the Application Security Engineer (R-00233) position at truezerotech located?
This Application Security Engineer (R-00233) role at truezerotech is based in Ashburn, VA. The position is listed as on-site or hybrid. Check the full job description or apply directly to confirm the work arrangement.
Is the Application Security Engineer (R-00233) role at truezerotech full-time or part-time?
This is listed as a Full Time position. It is posted as a Application Security Engineer (R-00233) role in the Application Engineering Team department at truezerotech.
Which team or department does the Application Security Engineer (R-00233) at truezerotech belong to?
This Application Security Engineer (R-00233) position is part of the Application Engineering Team department at truezerotech. See the full job description for more information about the team structure and responsibilities.
How do I apply for the Application Security Engineer (R-00233) position at truezerotech?
Click the "Apply Now" button on this page. You will be redirected to truezerotech's official application portal hosted on lever where you can submit your application directly.
When was the Application Security Engineer (R-00233) job at truezerotech posted?
This Application Security Engineer (R-00233) position at truezerotech was posted on Oct 2, 2026. Apply as soon as possible — early applications are often reviewed first.
Application Security Engineer (R-00233)
truezerotech
You'll be redirected to truezerotech's official application page on Lever.