Web Developer Security Engineer

Basecamp Consulting & Solutions LLC
Washington, DC, United States
2 months ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
3 years minimum
Compensation
$110,000.0 - $135,000.0
Working hours
Regular working hours
Job source

Tech stack

Kubernetes Security Java (Programming Language) JavaScript (Programming Language) .NET Framework Multitier Architecture Application Programming Interfaces (APIs) Artificial Intelligence Amazon Web Services HTML5 C Sharp (Programming Language) Cascading Style Sheets (CSS) Continuous Integration
+25 more
Programming Tools Web Development Windows Communication Foundation Intrusion Detection Systems Python (Programming Language) Log Analysis Model View Controller (MVC) Node.Js Open Web Application Security Systems Development Life Cycle Secure Coding Security Information and Event Management SQL Databases Wireshark TypeScript Software Vulnerability Management Web Applications Scripting ReactJS Software Security Kubernetes Api Design Restful APIs Devsecops Docker

Job description

Reporting to the Program Manager, the Web Developer Embeds security across the SDLC for mission-critical web apps, APIs, and sensitive data. Identifies/remediates vulnerabilities, logic flaws, insecure dependencies, and misconfigurations; drives end-to-end vulnerability lifecycle with threat modeling and validation; advises on secure design patterns and protocols; analyzes web/app logs for IoCs; builds automation for threat-intel integration and incident response; deploys/tunes WAF and FIM; ensures NIST 800-53 / FISMA / FedRAMP compliance and supports audits and authorization.

Requirements

Do you have experience in Web development?, * Ability to obtain a Federal Security Clearance

  • Hands-on secure software dev, DevSecOps automation, vulnerability remediation
  • Log analysis, FIM, WAF management
  • 3+ Web AppSec / AppSec Engineering / SSDLC
  • Modern web tech incl. .NET (C# MVC, WCF), HTML5, CSS3, JavaScript, REST APIs, SQL;
  • AI-assisted dev tools (Copilot, OpenAI API/Codex) + scripting (Python, JS/Node.js, Java, React.js, TypeScript);
  • OWASP Top 10 & secure coding; WAF and FIM deploy/tune;
  • Security testing tools (Wireshark, SIEM, IDS/IPS, NDR, EDR); risk assessment;
  • DevSecOps CI/CD security gates; security metrics & compliance reporting;
  • Tier II security ops support.

Preferred: Federal framework authorization (NIST 800-53/FISMA/FedRAMP); threat modeling; CI/CD security gate automation; AWS & container security (Docker, Kubernetes). Education: Bachelor’s+ (CS/Cyber/IS/Engineering/related). Credentials (current): one or more of - AppSec: CSSLP / GWEB / CASE; Offensive: OSWE / OSCP; Foundational: Security+ / GSEC.

Flexible work from home options available.

Benefits & conditions

Pulled from the full job description

  • Parental leave
  • Health insurance
  • 401(k) matching
  • Paid time off
  • Vision insurance
  • Dental insurance
  • Work from home, * 401(k) matching
  • Bonus based on performance
  • Competitive salary
  • Dental insurance
  • Health insurance
  • Paid time off
  • Parental leave
  • Training & development
  • Vision insurance

About the company

Established in August 2016, Basecamp Consulting and Solutions is a dynamic Information Technology (IT) consulting firm committed to delivering results for our clients. Specializing in next-generation IT and digital transformation solutions, Basecamp Consulting and Solutions is dedicated to helping clients achieve success through trust, innovation, quality work, and a steadfast commitment to results.

At Basecamp, we believe in the power of emerging technologies to propel our clients toward their goals. Our focus lies in business and IT modernization, utilizing Cloud solutions, cybersecurity, and cutting-edge application development. We pride ourselves on a team of talented professionals who are passionate about supporting our clients on their journey towards innovative outcomes.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:44 min

Playing synthesized backend audio objects in browsers

Lee Boonstra · LIVE

2:07 min

Inspecting default bridge architectures and custom Docker networks

Oliver Seitz Oliver Seitz · WWC 2025

45 sec

Working securely with Node.js path application programming interfaces

Sonya Moisset · WWC 2023

1:45 min

Transitioning from software development to security roles

Stefania Chaplin · WWC 2022

3:03 min

Building robust applications with standard web platforms

Dennie Declercq · LIVE

26:47 min

Exploring pathways to application security careers and research workflows

Vandana Verma Sehgal · LIVE

Videos

See all

Related articles

See all