DecisionPoint Corporation is seeking an Application Security Engineer to perform advanced application-layer security assessments, secure coding reviews, vulnerability analysis, and security integration for enterprise applications in a federal/DoD-aligned environment. This role ensures secure development practices across CMS components, APIs, integrations, CI/CD pipelines, and custom code, including threat modeling, SAST/DAST, and secure secrets management. Responsibilities include conducting secure code reviews of application logic, API endpoints, CMS templates and modules; performing API security assessments; CMS hardening; integrating security requirements into CI/CD pipelines with dependency scanning and automated controls; managing secrets and encryption; conducting static and dynamic testing; remediation validation; providing secure coding guidance to developers, architects, and product teams; collaborating with DevSecOps and cloud engineers to ensure secure build and deployment patterns; performing threat modeling and mitigating high-risk features; reviewing authentication flows and identity protections; documenting results and remediation plans; and supporting continuous monitoring, log analysis, and security triage. Qualifications include an active Top Secret clearance (Tier 5 background investigation); Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related field; at least 7 years of experience in application security or secure software development; experience with code reviews and API security testing; experience with SAST/DAST tools, depende

DecisionPoint Corporation is seeking an Application Security Engineer to perform advanced application-layer security assessments, secure coding reviews, vulnerability analysis, and security integration for enterprise applications in a federal/DoD-aligned environment. This role ensures secure development practices across CMS components, APIs, integrations, CI/CD pipelines, and custom code, including threat modeling, SAST/DAST, and secure secrets management. Responsibilities include conducting secure code reviews of application logic, API endpoints, CMS templates and modules; performing API security assessments; CMS hardening; integrating security requirements into CI/CD pipelines with dependency scanning and automated controls; managing secrets and encryption; conducting static and dynamic testing; remediation validation; providing secure coding guidance to developers, architects, and product teams; collaborating with DevSecOps and cloud engineers to ensure secure build and deployment patterns; performing threat modeling and mitigating high-risk features; reviewing authentication flows and identity protections; documenting results and remediation plans; and supporting continuous monitoring, log analysis, and security triage. Qualifications include an active Top Secret clearance (Tier 5 background investigation); Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related field; at least 7 years of experience in application security or secure software development; experience with code reviews and API security testing; experience with SAST/DAST tools, depende