Application Security Engineer

Overview DecisionPoint seeks an Application Security Engineer to perform advanced application-layer security assessments, secure coding reviews, vulnerability analysis, and security integration for enterprise applications supporting a federal and DoD-aligned mission environment.

This role ensures secure development practices across CMS components, APIs, integrations, CI/CD pipelines, and custom code. The Application Security Engineer supports secure coding standards, threat modeling, static and dynamic testing, and secure secrets management.

This position plays a critical role in strengthening application-level defenses, reducing vulnerabilities, and ensuring mission systems meet stringent DoD security requirements. This position is fully remote.

Duties & Responsibilities The Application Security Engineer will: Conduct secure code reviews, focusing on application logic, API endpoints, CMS modules, and backend integrations. Perform API security assessments to validate authentication, authorization, data handling, and boundary protections.

Support CMS hardening by reviewing templates, modules, configurations, and custom components for secure implementation. Integrate security requirements into CI/CD pipelines including SAST/DAST tools, dependency scanning, and automated controls.

Manage secrets handling, encryption policies, and secure storage of API keys, tokens, and credentials. Conduct static and dynamic application security testing, vulnerability assessments, and remediation validation. Provide secure coding guidance to developers, architects, and product teams.

Work with DevSecOps and cloud engineers to ensure secure build and deployment patterns. Perform threat modeling and recommend mitigations for high-risk application features. Review and validate authentication flows, SSO integrations, and identity-related protections.

Assist with security documentation including test results, remediation plans, and secure configuration records. Support continuous monitoring