Application Cyber Security Engineer

Glint Tech Solutions; Reston (VA); Hybrid; USD 100,000 - 130,000; Full time

Job summary

Glint Tech Solutions seeks an Application Cyber Security Engineer for a healthcare payor project based in Reston, VA. This hybrid role supports critical DevSecOps and cloud security initiatives.

The successful candidate will develop and implement application security solutions, ensuring compliance with various security frameworks and practices. Candidates must have extensive experience in cloud security and a solid understanding of AWS environments. Join us to drive innovation in the cybersecurity field.

Qualifications

• Strong hands-on experience in Application Security, Secure SDLC, and DevSecOps.
• Deep knowledge of OWASP Top 10 and secure coding practices.
• Hands-on AWS cloud security experience across core services.

Responsibilities

• Develop and implement application security solutions.
• Support DevSecOps practices including SAST, DAST, and penetration testing.
• Secure AWS environments including IAM, EC2, and Security Hub.

Skills

Application Security

DevSecOps

Cloud Security

Vulnerability Management

Kubernetes Security

Education

CISSP, CISM, CEH, or CISA certification

Tools

Terraform

Helm

CloudFormation

Job description

Application Cyber Security Engineer

Location: Hybrid – DMV area (DC, MD, VA) | Monthly onsite in Reston, VA

Company Overview

Glint Tech Solutions is a women-owned global staffing and IT recruiting firm connecting top technical talent with leading enterprise clients across the United States.

Project Description

Our client, a leading healthcare payor in Reston, VA, is seeking a software-focused Application Cyber Security Engineer to support DevSecOps, AWS Cloud Security, and cloud migration initiatives. This is primarily a remote role with required monthly onsite visits to Reston, VA. Candidates must reside in the DC, MD, or VA area — travel expenses will not be reimbursed. The interview process includes 2 rounds with a mandatory F2F final round in Reston, VA.

Key Responsibilities

• Develop and implement application security solutions; architect and engineer trusted systems into secure systems
• Support DevSecOps practices including SAST, DAST, IAST, SCA, penetration testing, secure code review, and threat modeling
• Secure AWS environments across IAM, EC2, S3, Lambda, EKS, CloudTrail, Security Hub, and GuardDuty
• Manage Kubernetes and container security including Amazon EKS, pod security, RBAC, network policies, and runtime hardening
• Operate CNAPP, CSPM, KSPM, and CWPP platforms such as Wiz, CrowdStrike, or similar solutions
• Map application and cloud-native controls to frameworks including NIST CSF, NIST 800-53, ISO 27001, SOC2, CIS Benchmarks, and MITRE ATT&CK
• Implement infrastructure-as-code and policy-as-code using Terraform, Helm, CloudFormation, and Rego/OPA
• Collaborate with development teams to communicate security findings and drive practical remediation
• Advise management on cybersecurity policies, processes, and procedures

Mandatory Skills

• Strong hands-on experience in Application Security, Secure SDLC, DevSecOps, Cloud Security, and Vulnerability Management
• Deep knowledge of OWASP Top 10, API Security Top 10, and secure coding practices
• Hands-on experience with CNAPP, CSPM, KSPM, CWPP platforms (Wiz, CrowdStrike, or similar)
• Hands-on AWS cloud security experience across core services
• Deep knowledge of Kubernetes and container security including Amazon EKS
• Strong CI/CD and DevSecOps pipeline security experience
• Experience with IaC and policy-as-code tools — Terraform, Helm, CloudFormation, Rego/OPA
• Strong written and verbal communication skills for both technical and non-technical audiences
• One or more certifications required: CISSP, CISM, CEH, or CISA

Nice-to-Have Skills

• AWS Certified Security Specialty certification
• Experience in healthcare or similarly regulated industries
• Background in cloud migration security initiatives