> Markdown version of [/jobs/ext/486362-web-developer-security-engineer](https://www.wearedevelopers.com/jobs/ext/486362-web-developer-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Web Developer Security Engineer

- **Company:** Basecamp Consulting & Solutions LLC
- **Location:** Washington, DC, United States (Remote available)
- **Experience:** Experienced
- **Salary:** $110,000.0 - $135,000.0
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Java (Programming Language), JavaScript (Programming Language), .NET Framework, Multitier Architecture, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, HTML5, C Sharp (Programming Language), Cascading Style Sheets (CSS), Continuous Integration, Programming Tools, Web Development, Windows Communication Foundation, Intrusion Detection Systems, Python (Programming Language), Log Analysis, Model View Controller (MVC), Node.Js, Open Web Application Security, Systems Development Life Cycle, Secure Coding, Security Information and Event Management, SQL Databases, Wireshark, TypeScript, Software Vulnerability Management, Web Applications, Scripting, ReactJS, Software Security, Kubernetes, Api Design, Restful APIs, Devsecops, Docker
- **Published:** June 5, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=8109afa1f6143ae3

## About the Role

Do you have experience in Web development?, * Ability to obtain a Federal Security Clearance

 * Hands-on secure software dev, DevSecOps automation, vulnerability remediation
 * Log analysis, FIM, WAF management
 * 3+ Web AppSec / AppSec Engineering / SSDLC
 * Modern web tech incl. .NET (C# MVC, WCF), HTML5, CSS3, JavaScript, REST APIs, SQL;
 * AI-assisted dev tools (Copilot, OpenAI API/Codex) + scripting (Python, JS/Node.js, Java, React.js, TypeScript);
 * OWASP Top 10 & secure coding; WAF and FIM deploy/tune;
 * Security testing tools (Wireshark, SIEM, IDS/IPS, NDR, EDR); risk assessment;
 * DevSecOps CI/CD security gates; security metrics & compliance reporting;
 * Tier II security ops support.

Preferred: Federal framework authorization (NIST 800-53/FISMA/FedRAMP); threat modeling; CI/CD security gate automation; AWS & container security (Docker, Kubernetes).
Education: Bachelor's+ (CS/Cyber/IS/Engineering/related).
Credentials (current): one or more of - AppSec: CSSLP / GWEB / CASE; Offensive: OSWE / OSCP; Foundational: Security+ / GSEC.

Flexible work from home options available.

## Description

Reporting to the Program Manager, the Web Developer Embeds security across the SDLC for mission-critical web apps, APIs, and sensitive data. Identifies/remediates vulnerabilities, logic flaws, insecure dependencies, and misconfigurations; drives end-to-end vulnerability lifecycle with threat modeling and validation; advises on secure design patterns and protocols; analyzes web/app logs for IoCs; builds automation for threat-intel integration and incident response; deploys/tunes WAF and FIM; ensures NIST 800-53 / FISMA / FedRAMP compliance and supports audits and authorization.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Stop using Node.js like in 2020! What changed and what you can do today with Node.js](https://www.wearedevelopers.com/videos/100011-stop-using-node-js-like-in-2020-what-changed-and-what-you-can-do-today-with-node-js)
- [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered)
- [The Resilience of the World Wide Web](https://www.wearedevelopers.com/videos/1281-the-resilience-of-the-world-wide-web)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [Stop Using Node.js Like It’s 2020! - Alfonso Graziano](https://www.wearedevelopers.com/videos/1863-stop-using-node-js-like-it-s-2020-alfonso-graziano)

## Related Articles

- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)