> Markdown version of [/jobs/ext/1406564-cybersecurity-engineer-applications](https://www.wearedevelopers.com/jobs/ext/1406564-cybersecurity-engineer-applications). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Engineer - Applications - **Company:** Bright Vision Technologies - **Location:** Herndon, VA, United States (Remote available) - **Experience:** Expert - **Salary:** $100,000.0 - $150,000.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Application Portfolio Management, Cloud Computing Security, Code Review, Cyber Security, Continuous Integration, Open Source Technology, Open Web Application Security, Runbook, Session Management, Software Engineering, Software Vulnerability Management, Cloud Platform System, Large Language Models, Software Security, GWAPT, Kubernetes, Information Technology, Tenable Nessus, Static Application Security Testing, Programming Languages, Dynamic Application Security Testing - **Published:** July 23, 2026 - **Apply:** https://www.careerjet.com/jobad/us0f8eb47d0c78fd6ef760a34dd0be68a7 ## About the Role * Bachelor's degree in Computer Science, Cybersecurity, or a related field. * Five or more years of application security or security engineering experience. * Strong understanding of OWASP Top 10, common vulnerability classes, and modern exploit patterns. * Hands-on experience performing code review across at least two major languages. * Deep familiarity with SAST, DAST, SCA, and CI/CD-integrated security tooling. * Strong understanding of authentication, authorization, and cryptographic primitives. * Experience with cloud security and modern infrastructure controls. * Strong communication skills with technical and non-technical audiences. * Proficiency in at least one programming language for tooling and automation. * Experience working closely with engineering teams in an Agile environment. Preferred Qualifications * Industry certifications such as OSCP, OSCE, GWAPT, or CISSP. * Experience with offensive security tooling and red-team operations. * Bug bounty experience, public CVEs, or open-source security contributions. * Familiarity with AI/LLM application security considerations. * Exposure to regulated industries with strict compliance requirements. ## Description We are looking for an Cybersecurity Engineer - Applications to embed security throughout the software development lifecycle, partnering with engineering teams to design secure systems, identify vulnerabilities, and reduce risk across our application portfolio. The role blends hands-on offensive and defensive skills with strong communication and collaboration, helping development teams build secure software efficiently rather than slowing them down. The ideal candidate brings deep technical security expertise, strong software engineering fundamentals, and a track record of shipping security improvements that meaningfully reduce risk in production. Key Responsibilities * Conduct threat modeling and security architecture reviews for new and existing applications and services. * Perform manual code reviews, secure design consultations, and pair with engineering teams on hardening critical components. * Operate and tune SAST, DAST, IAST, SCA, and secret-scanning tools across CI/CD pipelines. * Drive vulnerability management workflows including triage, prioritization, owner assignment, and SLA tracking. * Build paved-road libraries and frameworks that make secure patterns the default for engineering teams. * Lead red-team and purple-team exercises against internal applications and drive remediation of identified weaknesses. * Implement and operate runtime protections including WAF, RASP, bot protection, and abuse-detection mechanisms. * Design and enforce secure authentication, authorization, session management, and cryptographic patterns. * Partner with infrastructure and platform teams to harden container, Kubernetes, and cloud environments. * Develop and deliver application security training, lunch-and-learns, and onboarding content for engineering staff. * Respond to security incidents involving application vulnerabilities or active exploitation. * Track and apply emerging threats and CVEs that may affect the application portfolio. * Maintain comprehensive, current technical documentation - including architecture diagrams, design decisions, configuration references, runbooks, and operational procedures - so that the system remains supportable, auditable, and easy to onboard new engineers onto over time. * Stay current with application security research and emerging defensive tooling. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way) - [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Instant KAI Sandboxes with vCluster: Multi-Tenant, Multi-Scheduler GPU Sharing](https://www.wearedevelopers.com/videos/100333-instant-kai-sandboxes-with-vcluster-multi-tenant-multi-scheduler-gpu-sharing) - [Bridging AI and Nomad: a Go-based MCP Server for Cluster Control](https://www.wearedevelopers.com/videos/2063-bridging-ai-and-nomad-a-go-based-mcp-server-for-cluster-control) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)