Application Security Engineer — Web & API Safeguards

Method, Inc.; Washington; On-site; USD 135,000 - 155,000; Full time

Benefits offered by this job

Medical Coverage

Dental Coverage

Vision Coverage

Paid Holidays

PTO

Training Benefit

401(k)

Job summary

Spry Methods is seeking an Application Security Engineer to safeguard mission-critical web apps and APIs across the software development lifecycle. You will lead vulnerability remediation, threat modeling, and secure design patterns while supporting compliance with federal requirements.

The role emphasizes DevSecOps automation, risk assessment, and secure coding practices. The position demands hands-on experience with .NET, JavaScript, REST APIs, and OWASP standards, with opportunities to

Qualifications

• Minimum 3 years in web app security or secure SDLC work.
• Hands-on secure software development and DevSecOps automation.
• Experience with .NET, HTML5, CSS3, JS, REST, SQL.
• Familiarity with OWASP Top 10, WAFs, and security testing tools.
• Ability to model risk and guide remediation for core systems.

Responsibilities

• Identify, analyze, and remediate critical vulnerabilities in web apps and APIs.
• Drive vulnerability lifecycle through threat modeling and security assessments.
• Support secure design, data protection, and secure communications across apps.
• Review logs to detect anomalies and indicators of compromise.
• Implement automation scripts for threat intel and security monitoring.
• Participate in audits and risk assessments tied to federal frameworks.

Skills

Web app security

DevSecOps automation

Vulnerability remediation

.NET stack

JavaScript/HTML5/CSS3

REST APIs

SQL

AI-assisted tooling

OWASP Top 10

Security testing tools

WAFs

Risk assessment

Education

Bachelor’s degree in CS/cybersecurity/IS/engineering

Tools

Scripting languages

Job description

Spry Methods is seeking an Application Security Engineer to safeguard mission-critical web apps and APIs across the software development lifecycle. You will lead vulnerability remediation, threat modeling, and secure design patterns while supporting compliance with federal requirements.

The role emphasizes DevSecOps automation, risk assessment, and secure coding practices. The position demands hands-on experience with .NET, JavaScript, REST APIs, and OWASP standards, with opportunities to