{"id":3714091,"url":"https://alion.io/job/pennsylvania-state-university-application-security-engineer","title":"Application Security Engineer","company":{"id":37673,"name":"Pennsylvania State University","domain":"psu.edu","url":"https://alion.io/company/psu-edu","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"C","score":68,"open_postings":999,"ghost_share":0.526,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":41,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Diego, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":119736,"max":197604,"currency":"USD","period":"year","gross":null,"usd_annual":197604},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"C#","optional":false},{"name":"CI/CD","optional":false},{"name":"Defense in Depth","optional":false},{"name":"Go","optional":false},{"name":"JavaScript","optional":false},{"name":"Least Privilege","optional":false},{"name":"NIST 800-53","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false},{"name":"Zero Trust","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true}],"status":"live","first_seen_at":"2026-11-03T00:00:00Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-08T20:20:55Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":5},"description":"APPLICATION INSTRUCTIONS:\nCURRENT PENN STATE EMPLOYEE (faculty, staff, technical service, or student), please login to Workday to complete the internal application process. Please do not apply here, apply internally through Workday.\n\nCURRENT PENN STATE STUDENT (not employed previously at the university) and seeking employment with Penn State, pleaselogin to Workday to complete thestudent application process. Please do not apply here, apply internally through Workday.\n\nIf you are NOT a current employee or student, please click “Apply” and complete the application process for external applicants.\n\nApproval of remote and hybrid work is not guaranteed regardless of work location. For additional information on remote work at Penn State, see Notice to Out of State Applicants.\nPOSITION SPECIFICS\nThis position will be located fully onsite in San Diego, CA. Questions about flexible work arrangements may be directed to the hiring manager during the interview process.\nPeriodic travel to local and remote test sites is required.\nWe are seeking a highly skilled Application Security Engineer with a strong foundation in security engineering to join the DevSecOps Team of the Joint Mission Integration and Experimentation (JMIE) Division within the Information Advantage Office at the Applied Research Laboratory (ARL) at Penn State, based in San Diego, CA. The JMIE Division delivers advanced communications capabilities and secure experimentation networks supporting departmental mission partners, including cross-domain data movement, tactical compute environments, and resilient edge processing strengthen secure software design, development, and deployment across our mission-focused environments. In this role, you will champion application security best practices, embed security across the software development lifecycle, and work closely with engineering teams to ensure applications are resilient, compliant, and securely architected from concept to production.\nARL is an authorized DoD SkillBridge partner and welcomes all transitioning military members to apply.\nYou will:\nLead the integration of application security best practices into Agile and DevSecOps workflows, ensuring security requirements are included from initial design through deployment\nConduct deep-dive secure code reviews, threat modeling, and architecture analysis to identify vulnerabilities and guide remediation strategies\nPerform static (SAST), dynamic (DAST), and interactive application security testing, ensuring coverage across microservices, APIs, and containerized applications\nDevelop and maintain secure coding standards, patterns, and guidance used across engineering teams\nPartner with developers and product owners to ensure secure design decisions, using approaches such as least privilege, secure defaults, zero-trust principles, and defense-in-depth\nManage and optimize tools supporting application security, including SAST/DAST platforms, software composition analysis (SCA), secret-scanning, and container/CI pipeline security tool\n Evaluate open-source and third-party components for vulnerabilities, license risks, and supply chain integrity\nGuide teams in secure API development, authentication/authorization best practices, cryptographic use, and secure data handling\nValidate security controls and perform risk analysis for applications undergoing release, modernization, or cloud migration\nAssist in building a security-focused engineering culture through training, documentation, and hands-on developer engagement\nCollaborate with cybersecurity, cloud, and network teams to ensure application security aligns with enterprise risk, RMF requirements, and overall mission objectives\nAdditional responsibilities for senior-level roles may include:\nLeading threat modeling sessions, red/blue-team collaboration, and advanced vulnerability analysis Designing scalable AppSec programs and enterprise SDLC security strategies\nSupporting RMF documentation and security artifacts relevant to application-level controls\nActing as a security advisor on high-visibility or mission-critical applications\nRequired Skills/Experience include:\nStrong background in application security, including secure development practices, vulnerability analysis, and secure design principles\nVersed in SAST, DAST, SCA, and CI/CD security integration\nProficiency with secure coding techniques in one or more languages (e.g., Python, Java, C#, JavaScript/TypeScript, Go)\nExperience reviewing application architectures, microservices, and containerized workloads for security weaknesses\nFamiliarity with NIST 800-53 or similar control frameworks as they relate to application-level security requirements\nStrong understanding of authentication, authorization, encryption, and API security best practices\nStrong background in cybersecurity disciplines, including vulnerability management, scanning, compliance evaluation, and control implementation\nExperience interpreting security policy, generating evidence, and documenting test results for NIST 800-53 / JSIG security controls\nActive TS/SCI clearance\nPreferred Skills/Experience include:\nExperience operating within DevSecOps pipelines and modern CI/CD ecosystems\nKnowledge of cloud-native application security (AWS, Azure, or DoD cloud environments)\nExperience with secure design reviews for APIs, distributed systems, mobile applications, or cross-domain solutions\nBackground with eMASS, STIGs, or ACAS in support of application accreditation efforts\nRelevant certifications: CSSLP, GWAPT, GWEB, GCSA, GSSP, or CISSP Prior experience delivering developer security training or building secure coding programs\nMINIMUM EDUCATION, WORK EXPERIENCE & REQUIRED CERTIFICATIONS\nBachelor's Degree\n3+ years of relevant experience; or an equivalent combination of education and experience accepted\nRequired Certifications:\nNoneARL’s purpose is to research and develop innovative solutions to challenging scientific, engineering, and technology problems in support of the Navy, the Intel Community (IC), and other federal government customers.FOR FURTHER INFORMATION on ARL, visit our website atwww.arl.psu.edu.\nBACKGROUND CHECKS/CLEARANCES\nEmployment with the University will require successful completion of background check(s) in accordance with University policies.Notice regarding employment at the Applied Research Laboratory (ARL):\nEmployees must be eligible to obtain a government security clearance, participate in the ARL drug testing program, and comply with electronic and physical monitoring requirements applicable to federal contractors. ARL operates in a secure information environment involving Unclassified, Controlled Unclassified Information (CUI), and Classified information. Personal electronic devices brought onsite must be registered and may be restricted from certain areas. You must be a U.S. citizen to apply.SALARY & BENEFITS\nThe salary range for this position, including all possible grades, is $119,736.00 - $197,604.00. This salary range includes an adjustment based on required geographic work location.Salary Structure - Information on Penn State's salary structure\nPenn State provides a competitive benefits package for full-time employees designed to support both personal and professional well-being. In addition to comprehensive medical, dental, and vision coverage, employees enjoy robust retirement plans and substantial paid time off which includes holidays, vacation and sick time. One of the standout benefits is the generous 75% tuition discount, available to employees as well as eligible spouses and children. For more detailed information, please visit our Benefits Page.\nCAMPUS SECURITY CRIME STATISTICS\nPursuant to the Jeanne Clery Disclosure of Campus Security Policy and Campus Crime Statistics Act and the Pennsylvania Act of 1988, Penn State publishes a combined Annual Security and Annual Fire Safety Report (ASR). The ASR includes crime statistics and institutional policies concerning campus security, such as those concerning alcohol and drug use, crime prevention, the reporting of crimes, sexual assault, and other matters. The ASR is available for review here.\nEEO IS THE LAW\nPenn State is an equal opportunity employer and is committed to providing employment opportunities to all qualified applicants without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. If you are unable to use our online application process due to an impairment or disability, please contact 814-865-1473.\nFederal Contractors Labor Law Poster\nPA State Labor Law Poster\nPenn State Policies\nCopyright Information\nHotlines","description_format":"text","description_chars":8659,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["DoD SkillBridge","Flexible schedule","Hybrid work","Retirement plans","Veteran hiring program"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Higher Education"],"lifecycle":[{"event":"open","at":"2026-11-04T00:17:50Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":5,"expected_fill_days":41,"reasons":["conf:8","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-08T05:47:12Z"},"pay":{"stated_usd_annual":197604,"is_top_pay":true},"html_url":"https://alion.io/job/pennsylvania-state-university-application-security-engineer","json_url":"https://alion.io/job/pennsylvania-state-university-application-security-engineer.json","meta":{"generated_at":"2026-11-09T06:09:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1978,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":37673},"rest":"https://alion.io/mcp/rest/get_company?id=37673"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpennsylvania-state-university-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpennsylvania-state-university-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpennsylvania-state-university-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/pennsylvania-state-university-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpennsylvania-state-university-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3714091}},{"tool":"search_jobs","arguments":{"company":"psu.edu","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3714091},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}