Web Developer Security Engineer

We are seeking an experienced Web Developer Security Engineer to serve as Key Personnel in protecting mission-critical web applications, APIs, and sensitive data. In this critical role, you will embed robust security principles throughout the Software Development Lifecycle (SDLC) to build security as a proactive, foundational pillar. You will act as the bridge between application development and cybersecurity, ensuring our applications are secure by design, compliant with federal frameworks, and resilient against evolving threats., + Identify, analyze, and neutralize critical vulnerabilities, logic flaws, insecure dependencies, and misconfigurations.

• Drive the end-to-end vulnerability lifecycle by integrating proactive threat modeling and advanced security assessments.

• Actively support the end-to-end response to web application security events.

• Deploy, tune, and maintain Web Application Firewalls (WAFs) and File Integrity Monitoring (FIM) solutions.

• Maintain meticulous documentation of findings, remediation steps, and security controls.

• Ensure all web applications and cloud infrastructures comply with Federal cybersecurity frameworks (NIST SP 800-53, FISMA, and FedRAMP).

• Perform complex risk assessments, analyze cyber threats, and provide remediation guidance for core systems and dependencies.

• Evaluate, recommend, and implement security controls for mobile device solutions and mobile-web interfaces.

• Participate in audits and security authorization processes.

Experience & Technical Skills:

• Minimum of 3 years of experience in Web Application Security, Application Security Engineering (AppSec), or secure software development life cycle (SSDLC).

• Proven development experience with modern web technologies: .NET (C# MVC, WCF), HTML5, CSS3, JavaScript, REST APIs, and SQL.

• Proficiency with scripting languages (Python, JavaScript/Node.js, Java, React.js, TypeScript).

• Strong understanding of the OWASP Top 10, secure coding standards, and vulnerability mitigation.

• Hands-on experience with security testing and monitoring tools (Wireshark, SIEM, IDS/IPS, NDR, EDR).

• Experience providing Tier II support for security operations.

Education & Mandatory Credentials:

• Education: Bachelor’s degree (or higher) in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field.

• Certifications: Candidates must hold at least one of the following current certifications:

• Specialized AppSec: CSSLP, GWEB, or EC-Council CASE

• Offensive Security: OSWE or OSCP

• Foundational Security: Security+ or GSEC

• CRITICAL REQUIREMENT: The required certification (or its prior equivalent) must have been maintained for a minimum of 5 years . Expired certifications or certifications never used professionally will not be considered.

Preferred Qualifications

• In-depth experience with Federal cybersecurity authorization processes (NIST SP 800-53, FISMA, FedRAMP).

• Proven background in threat modeling, risk assessment, and designing resilient security architecture.

• Advanced experience automating security gates within CI/CD pipelines.

• Knowledge of cloud security (AWS) and container security (Docker, Kubernetes).

Powered by JazzHR