Cloud App Security Engineer – Secure DevOps & CI/CD

Akumen, Inc.; Camp Springs (MD); On-site; USD 115,000 - 135,000; Full time

Job summary

Akumen, Inc. is seeking a Cloud Application Security Analyst to safeguard mission-critical web, mobile, API, and cloud-based applications. You will partner with software engineering, DevOps, QA, infrastructure, and cybersecurity teams to identify vulnerabilities and strengthen secure engineering practices.

You will apply Zero Trust principles, automate security validation in CI/CD pipelines, and help development teams remediate security risks before production deployment.

Qualifications

• Bachelor's degree in IT, CS, Cybersecurity, Engineering, or equivalent relevant experience.
• At least three years of experience in network engineering, cloud networking, network security, application security, or cloud security infrastructure support.
• Demonstrated knowledge of the OWASP Top 10, web application architecture, HTTP, APIs, REST, and GraphQL.
• Hands-on experience with SAST/DAST tools, vulnerability triage, manual code review, and secure SDLC or CI/CD workflows.
• Working knowledge of at least one programming or scripting language, such as Python, JavaScript, Java, or C#, with strong analytical, troubleshooting, communication, and cross-functional collaboration skills.

Responsibilities

• Perform static application security testing (SAST), dynamic application security testing (DAST), and targeted manual security reviews for web and mobile applications.
• Review source code, APIs, application architectures, and cloud designs to identify security weaknesses before production release.
• Triage, prioritize, document, and support remediation of vulnerabilities, including issues aligned with the OWASP Top 10.
• Integrate automated security scanning and validation into CI/CD pipelines using platforms such as GitHub, GitLab, or Jenkins.
• Conduct threat modeling for new features, applications, APIs, and microservices, and maintain supporting security evidence and diagrams.
• Protect public-facing applications, internal services, APIs, and cloud resources through appropriate network security controls, segmentation, traffic inspection, and secure configuration.
• Deploy and manage cloud networking and security controls using Terraform, Bicep, ARM templates, or comparable Infrastructure as Code tools.
• Maintain repeatable secure configuration templates, technical baselines, controlled changes, and automated validation procedures.
• Partner with application, cloud, infrastructure, QA, and engineering teams to eliminate unnecessary exposure and overly permissive configurations.
• Research emerging application-layer and cloud threats, update internal security guidance, and promote secure coding and DevSecOps practices.

Skills

SAST/DAST tools

OWASP Top 10

Threat modeling

CI/CD security

Vulnerability triage

Scripting: Python/JS

Code reviews

Cloud security

CI/CD pipelines

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

Terraform

Bicep

ARM templates

Docker

Kubernetes

GitHub

GitLab

Jenkins

Job description

Akumen, Inc. is seeking a Cloud Application Security Analyst to safeguard mission-critical web, mobile, API, and cloud-based applications. You will partner with software engineering, DevOps, QA, infrastructure, and cybersecurity teams to identify vulnerabilities and strengthen secure engineering practices.

You will apply Zero Trust principles, automate security validation in CI/CD pipelines, and help development teams remediate security risks before production deployment.