AppSec Jobs

ECS Security Team

Open security roles at ECS, and what we know about the team behind them.

information technology & services · 3900 employees · 3 open roles. Updated October 15, 2026.

Open roles (3)

ECS

Vulnerability Management Lead

Security Intel
Richmond, Virginia, United Statesinformation technology & servicesPosted Date unknownVerified 4d ago

“ECS emphasizes an "invisible zero trust" approach that shifts the burden of verification from users to infrastructure.”

View Job

ECS

AI-Focused Red Team/Blue Team Operator

Security Intel
Washington, District of Columbia, United Statesinformation technology & servicesPosted Date unknownVerified 3d ago

“ECS emphasizes an "invisible zero trust" approach that shifts the burden of verification from users to infrastructure.”

View Job

ECS

Penetration Testing Team Lead

Security Intel
Richmond, Virginia, United Statesinformation technology & servicesPosted Date unknownVerified 3d ago

“ECS emphasizes an "invisible zero trust" approach that shifts the burden of verification from users to infrastructure.”

View Job

Security at ECS

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

How they approach application security

  • ECS emphasizes an "invisible zero trust" approach that shifts the burden of verification from users to infrastructure.
  • The philosophy prioritizes developer enablement, stating "if a zero trust implementation makes life harder for users, it's already failing." The company also emphasizes that AI security requires the same rigor as cybersecurity, and advocates for preemptive cyber approaches rather than reactive breach response.

The team

  • The AppSec team is integrated into the broader Cybersecurity Center of Excellence, led by Vice President of Cybersecurity Scott Hoge.
  • No dedicated Application Security team or manager is publicly identified.
  • Security functions appear distributed across the cybersecurity organization with common patterns including network and web-based application security and investigation of complex computer and information security incidents.

What they're working on

  • Security initiatives include zero-trust principles fully compliant with DoD and IC standards.
  • The organization conducts adversarial red-teaming and formal privacy evaluation for sensitive models.
  • Recent initiatives focus on moving at AI speed without compromising security.
  • However, no public documentation exists for AppSec-run secure SDLC artifacts, security champions programs, or specific remediation SLAs.