Web Developer Security Engineer
New
S
Spry MethodsCybersecurity
Washington, DC (Remote)Full-TimeMiddle
Salary135,000 - 155,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- Minimum of three years of experience in web application security, application security engineering, or secure software development lifecycle work.
- Required Skills
- SQLHTMLCSSJavascript.NETRESTful APIs
Requirements
- Have at least three years of experience in web application security, application security engineering, or secure software development lifecycle work.
- Bring hands-on experience in secure software development, DevSecOps automation, and vulnerability remediation.
- Have experience with .NET technologies, HTML5, CSS3, JavaScript, REST APIs, and SQL.
- Be able to use AI-assisted development tools and scripting languages to automate monitoring and compliance efforts.
- Understand the OWASP Top 10, secure coding standards, web application firewalls, file integrity monitoring, and security testing tools.
- Be able to perform risk assessments and provide remediation guidance for core systems and dependencies.
- Have a bachelor's degree or higher in computer science, cybersecurity, information systems, engineering, or a related field.
- Meet federal screening and suitability requirements before starting.
- Hold a current listed security certification maintained for at least five years: CSSLP, GWEB, CASE, OSWE, OSCP, Security+, or GSEC.
- Preferred: Have in-depth experience with federal cybersecurity frameworks and authorization processes.
- Preferred: Have experience with threat modeling, resilient security architecture, cloud security, and container security.
Responsibilities
- Identify, analyze, and remediate vulnerabilities, logic flaws, insecure dependencies, and misconfigurations in web applications and APIs.
- Drive the vulnerability lifecycle through threat modeling, security assessments, and technical validation of remediation actions.
- Support secure design patterns, data protection mechanisms, and secure communication protocols across applications and supporting services.
- Review web server and application logs to detect anomalies and indicators of compromise.
- Implement automation scripts for threat intelligence integration and application security monitoring.
- Participate in audits, risk assessments, and security authorization activities tied to federal frameworks.
View Full Description & ApplyYou'll be redirected to the employer's site
