App Security Engineer: Secure Web & DevSecOps

Spry Methods, Inc.; Washington (District of Columbia); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Paid holidays

PTO

Training benefit

401(k)

Job summary

Spry Methods, Inc. seeks an Application Security Engineer to protect mission-critical web applications, APIs, and data across the software development lifecycle in federal environments.

You will lead vulnerability remediation, threat modeling, security monitoring, and compliance activities, leveraging .NET, HTML5, CSS3, JavaScript, REST APIs, and SQL. Expect OWASP Top 10 guidance, secure coding practices, and DevSecOps integration within a high-security program.

Qualifications

• Minimum 3 years of web application security experience.
• Hands-on secure software development and DevSecOps automation.
• Proven experience with .NET, HTML5, CSS3, JavaScript, REST APIs, and SQL.
• Ability to use AI-assisted development tools to automate monitoring and compliance.
• Strong knowledge of OWASP Top 10, secure coding, WAFs, FIM, and security testing tools.
• Ability to perform risk assessments and provide remediation guidance.
• Bachelor's degree or higher in CS, cybersecurity, information systems, engineering, or related field.
• Ability to meet federal screening and suitability requirements.

Responsibilities

• Identify, analyze, and remediate vulnerabilities in web apps and APIs.
• Drive vulnerability lifecycle through threat modeling and security assessments.
• Support secure design, data protection, and secure communication across apps.
• Review logs to detect anomalies and indicators of compromise.
• Implement automation scripts for threat intel and app security monitoring.
• Participate in audits, risk assessments, and security authorization activities under federal frameworks.

Skills

Web application security

DevSecOps automation

Secure coding practices

OWASP Top 10

Risk assessments

Education

Bachelor's degree in Computer Science or related field

Tools

.NET

HTML5

CSS3

JavaScript

SQL

REST APIs

Job description

Spry Methods, Inc. seeks an Application Security Engineer to protect mission-critical web applications, APIs, and data across the software development lifecycle in federal environments.

You will lead vulnerability remediation, threat modeling, security monitoring, and compliance activities, leveraging .NET, HTML5, CSS3, JavaScript, REST APIs, and SQL. Expect OWASP Top 10 guidance, secure coding practices, and DevSecOps integration within a high-security program.