Cybersecurity Engineer Journeyman at ASM Research
Arlington
—
Jul 26, 2026
Arlington
Jul 28, 2026
What this job asks for AI summary
A mid-to-senior application security engineering role supporting a federal or DoD-adjacent environment. The position spans secure architecture design, embedding security controls into CI/CD pipelines, threat modeling, vulnerability assessment, and incident response, while also setting policy and training developers. Candidates need broad hands-on experience across the full software development lifecycle with a strong grounding in DoD/NIST frameworks and Zero Trust principles.
Senior level · 5+ years
Advertised as Mid, but the requirements read as Senior.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $132,021 (middle half $99,961–$167,095).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 29, 2026. It is a model, not a headcount.
Why we read it this way (7)
The title 'Journeyman' is a mid-level framing, but the required 5–10 years of experience and the breadth of responsibilities (architecture, threat modeling, incident response, policy, training) are consistent with a Senior-level role on a standard career ladder.
SOC classification is Medium confidence: the role is primarily security analysis and engineering (15-1212), but the emphasis on embedding security into the SDLC, code review, and DevSecOps pipelines gives it a meaningful software-development dimension (15-1252).
No work location is specified in the posting; CBSA and state fields are left blank. The mention of a federal/high-compliance environment and DoD requirements suggests an on-site or hybrid arrangement, so remote is set to false.
Degree requirement is set to None because the posting explicitly accepts 'equivalent relevant experience' in lieu of a Bachelor's degree.
Clearance is set to None: the posting requires eligibility to obtain a background investigation but does not gate on holding an active clearance.
Rake is listed in the preferred DevOps tooling section but is a Ruby build tool with very limited standalone relevance; it was omitted as it is not a canonical, widely-recognized standalone technology in this context. All other named tools are captured.
Ignored 2 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): static analysis, dynamic analysis.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.