S

Steampunk

Federal software solutions delivering user-focused outcomes

Application Security Engineer

Full-TimeDeadline 9/30/27
$100k - $155k/yr
Mid
Bachelor's, Master's
McLean, VA, USA
In Person
CybersecuritySecurity Engineering & Architecture

About the job

Requirements
  • Ability to obtain a U.S. government security clearance.
  • A Master's degree and three years of relevant experience, or a Bachelor's degree and five years of relevant experience, or no degree and nine years of relevant experience.
  • Possess and maintain at least one professional certification relevant to the technical service or product being deployed or maintained.
  • Ability to secure multiple areas of an enterprise application stack, including operating system, database, application server, load balancer, and web server layers.
  • Understanding of public key infrastructure and Transport Layer Security certificates.
  • Working knowledge of technologies used to build and deploy enterprise applications, such as Maven, Gradle, Git, Jenkins, Ansible, Java, C#/.NET, Apache Tomcat, Apache HTTP Server, IIS, F5, Oracle, Microsoft SQL Server, and PostgreSQL.
  • Working knowledge of AWS and Azure Government cloud environments.
  • Ability to analyze Defense Information Systems Agency Security Technical Implementation Guide audit compliance scan results and provide recommendations for resolution.
  • Working knowledge of Jira, ServiceNow, or equivalent tools.
  • Working knowledge of operating-system and dynamic application security testing scan tools, including Invicti, WebInspect, and DAST/IAST suites.
  • Experience using Python to automate tasks.
  • Relevant industry certifications such as CEH, GFACT, GPEN, or OSCP, or other application-technology-specific certifications.
Responsibilities
  • Provide subject matter expertise for risk assessments while working in an Agile environment and applying knowledge of the full software development lifecycle.
  • Advocate for appropriate security practices and ensure they are communicated and implemented within application development portfolios.
  • Work with system administration teams to assist with vulnerability remediation and environment hardening, and recommend improvements to vulnerability management.
  • Integrate with application development and security assurance divisions to ensure vulnerability findings are understood, remediated, or baselined as appropriate.
  • Document and socialize security findings and remediation solutions in an enterprise knowledge base.
  • Support the Information Assurance Branch and Security Operations Center with scan analysis, and partner with development teams to understand and remediate security findings.
  • Develop proactive solutions to improve enterprise security posture through process streamlining and automation.
  • Analyze the security environment and provide recommendations.
Desired Qualifications
  • Former developer or systems administrator experience.

About the company

Steampunk helps U.S. federal government agencies deliver digital programs and services. The company partners with government clients, using a startup-style, customer-centered delivery approach to design, develop, and deploy software and services that support mission goals. Its products and work are executed in close collaboration with clients, emphasizing rapid delivery and high-quality user experiences. Steampunk differentiates itself by focusing specifically on federal customers and by embedding client input at every step of the process, from planning through deployment, so outcomes meet user needs and mission requirements at speed. The overall goal is to produce reliable, usable solutions that achieve clear mission impacts for government programs.

Company Size

501-1,000

Company Stage

N/A

Total Funding

N/A

Headquarters

Winston-Salem, North Carolina

Founded

2002

Get referred to Steampunk

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • August 4, 2026 merger with MetroStar expands scale to roughly 1,600 employees.
  • Recent combined revenue estimates near $500 million strengthen pursuit of larger federal contracts.
  • Steampunk's $205 million last-12-month prime obligations show continued contract momentum across civilian agencies.

What critics are saying

  • Veritas acquisition closes Q3 2026, then MetroStar integration can distract delivery teams.
  • Customer concentration at ICE, CBP, and USDA exposes revenue to recompetes.
  • PE rollup pressure can erode Steampunk's user-centered culture and trigger attrition by 2027.

What makes Steampunk unique

  • Design Intelligence still separates Steampunk from commodity federal systems integrators.
  • USDA STRATUS BOA, awarded May 21, 2024, secured ten-year cloud delivery access.
  • NVIDIA Partner Network membership from March 13, 2024 supports federal AI execution.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Professional Development Budget
  • Conference Attendance Budget

Growth & Insights and Company News

6 month growth

15%

1 year growth

15%

2 year growth

14%
Washington Technology
Aug 4th, 2026
Veritas to merge Steampunk into MetroStar Systems.

Veritas to merge Steampunk into MetroStar Systems. Stay Connected Find opportunities - and win them. By Nick Wakeman , Editor-in-Chief, Washington Technology August 4, 2026 03:21 PM ET The combination pairs MetroStar's artificial intelligence and digital transformation work with the delivery model of Steampunk. Veritas Capital plans to acquire Steampunk and will merge the business with MetroStar Systems, an existing company in the private equity firm's portfolio. The combination will bring together MetroStar's artificial intelligence and digital transformation work with Steampunk's user-centered delivery model approach. Terms of the acquisition announced Tuesday were not disclosed. All parties involved expect to close the transaction by end of this calendar quarter. "The combination of MetroStar and Steampunk will create a powerful force multiplier for delivering mission-critical solutions at scale," said Hugh Evans, managing partner of Veritas. Veritas acquired MetroStar in November 2025. Steampunk was formed in 2019 when a group of former Agilex executives acquired and rebranded SE Solutions. In the last 12 months, Steampunk has pulled in $205 million in unclassified prime contract obligations. Data from USASpending.gov pegs its top customers as Customs and Border Protection, Immigration and Customs Enforcement, and the Patent and Trademark Office. MetroStar has logged $52.6 million in unclassified prime contract revenue over the last 12 months. MetroStar's biggest customers are the Air Force, Navy, Army and Defense Information Systems Agency. "Together, we can move missions faster, operate at a greater scale, and deliver even bigger outcomes for our customers and their missions," said Ali Reza Manouchehri, co-founder and CEO of MetroStar. Robert W. Baird & Co. was financial adviser and Holland & Knight LLP was legal counsel to Steampunk. Latham & Watkins LLP is the legal counsel to MetroStar and Veritas.

The Mirror Democrat and Savanna Times-Journal
Aug 4th, 2026
Veritas Capital Unites Steampunk and MetroStar, Accelerating Mission Impact

Combination will unite two of GovCon's most disruptive innovators to deliver AI-enabled digital transformation with

MetroStar
Aug 4th, 2026
Veritas Capital unites Steampunk and MetroStar, accelerating mission impact.

Veritas Capital unites Steampunk and MetroStar, accelerating mission impact. RESTON, VA - Tues., August 4, 2026 - Combination will unite two of GovCon's most disruptive innovators to deliver AI-enabled digital transformation with greater scale, speed, and conviction. Veritas Capital ("Veritas"), a leading investor at the intersection of technology and government, today announced that affiliates of The Veritas Capital Vantage Fund, L.P. ("Vantage Fund") have entered into a definitive agreement to acquire Steampunk, Inc. ("Steampunk"), a change agent in the federal contracting industry. Following the close of the transaction, Veritas will merge Steampunk with existing portfolio company MetroStar Systems, LLC ("MetroStar") to form one of the government contracting industry's most formidable forces for mission-driven transformation. The merger will bring together two companies built on the same commitment: providing warfighters, intelligence professionals, defense civilians, public servants, and the United States government with innovative tools to work faster, smarter, and safer. "The combination of MetroStar and Steampunk will create a powerful force multiplier for delivering mission-critical solutions at scale," said Hugh Evans, Managing Partner of Veritas. "Together, the companies will provide agency partners with AI-enabled solutions to move with agility, meet mission demands faster, and harness cutting-edge technology that drives mission impact. This is a combination that will set a new standard for what our nation's warfighters, intelligence professionals, federal civilians, and homeland security leaders should expect from an industry partner." The combined company will benefit from complementary offerings of both organizations. MetroStar's deep AI and digital transformation product expertise will be strengthened by Steampunk's user-centered delivery model approach, Design Intelligence(R), pairing culture and capability in a way MetroStar Systems, LLC believe few competitors can match. "MetroStar has built something rare: real technical strength paired with a culture that actually backs it up," said Matt Warren, CEO, Steampunk. "With our shared action-oriented mentality, drive to achieve transformative outcomes, and track record of putting people, employees, clients, and the communities they serve at the heart of our businesses, combining forces will mean more capability for our clients and more opportunity for our people." "This transaction represents a milestone for both MetroStar and Steampunk, which has created market differentiation powered by Design Intelligence(R), innovation, and a dynamic culture," said Ali Reza Manouchehri, Co-Founder and CEO, MetroStar. "Together, we can move missions faster, operate at a greater scale, and deliver even bigger outcomes for our customers and their missions. The road ahead is full of possibility, and I could not be more excited about what we will build together." The transaction is expected to close in the third quarter of 2026, subject to customary closing conditions. Financial terms were not disclosed. Advisors Robert W. Baird & Co. served as financial advisor and Holland & Knight LLP served as legal counsel to Steampunk. Latham & Watkins LLP is acting as legal counsel to MetroStar and Veritas. About Steampunk Steampunk is a change agent in the federal contracting industry, bringing new thinking to clients across Homeland, Federal Civilian, Health, and Defense. Guided and powered by a User-Centered delivery methodology, Design Intelligence(R), Steampunk exists to positively disrupt how government services are designed and delivered. About MetroStar MetroStar is a trusted provider of AI-enabled products and solutions for U.S. government agencies, advancing the nation's most critical missions through speed, innovation, and purpose. With a focus on AI, digital transformation, and secure enterprise modernization, MetroStar delivers technology that translates mission needs into capability at record pace, empowering defense and national security leaders to outpace emerging threats and accelerate mission success. About Veritas Capital Veritas is a longstanding technology investor with over $54 billion of assets under management and a focus on companies operating at the intersection of technology and government. The firm invests in companies that provide critical products, software, and services, primarily technology and technology-enabled solutions, to government and commercial customers worldwide. Veritas seeks to create value by strategically transforming the companies in which it invests through organic and inorganic means. Leveraging technology to make a positive impact across vitally important areas, such as healthcare, education, and national security, is core to the firm. Veritas is a proud steward of national assets, improving the quality of healthcare while reducing cost, advancing its educational system, and protecting its nation and allies. For more information, visit www.veritascapital.com. Media Contacts Steampunk: Robert Pearson | [email protected] | 571-344-5538 MetroStar: Stephanie Haynes | [email protected] | 703-481-9581 Veritas Capital: Prosek Partners | [email protected] Management | making an impact. Feature | AI/ML | innovation lab.

PR Newswire
May 21st, 2024
Steampunk Awarded Boa On Usda Stratus Program

MCLEAN, Va., May 21, 2024 /PRNewswire/ -- Steampunk announced today that the company has been awarded a Basic Ordering Agreement (BOA) with the United States Department of Agriculture (USDA).The BOA was awarded as part of the STRATUS program for cloud integration and development support services. The STRATUS program aims to accelerate cloud adoption by providing rapid access to hyperscale cloud service providers, integration and development service providers, and SaaS providers/resellers. Steampunk was selected for the program's unrestricted portion and has a 10-year ordering period to support USDA's cloud solution objectives."Steampunk is thrilled and honored to continue our partnership with USDA through STRATUS," said Joe Nizhnikov, Senior Vice President at Steampunk. "Over the last four years, Steampunk has had the privilege of working directly with USDA to exploit the power and innovation of cloud computing using our Design Intelligence® delivery framework. Together we have demonstrated the very real business value of cloud-based solutions through cloud migration, modernization, and innovation engagements."Since 2019, Steampunk has supported the majority of USDA mission areas, as well as the Department's Office of the Chief Information Officer (OCIO) Digital Infrastructure Services Center (DISC). Steampunk thrives on producing mission outcomes with capabilities in DevSecOps, Data Exploitation, Digital Platform modernization, Cybersecurity, and Design & Strategy

HS Today
Apr 16th, 2024
Stefani Shepherd Joins Steampunk as Senior Director of Growth for DHS

Stefani Shepherd joins Steampunk as Senior Director of Growth for DHS.