Enterprise Web Application Security Engineer

Steampunk, Inc.; McLean (VA); On-site; USD 100,000 - 155,000; Full time

Job summary

Steampunk, Inc. in McLean, VA is seeking a Web Application Security Engineer to remediate portfolio-wide vulnerabilities across enterprise applications. You will work with system admin teams to harden environments and enhance vulnerability management.

In an Agile setting, you will develop proactive security solutions, document findings, and socialize remediation strategies. Strong broad experience across OS, databases, app servers, PKI/TLS, and cloud are valued.

Qualifications

• U.S. government Security Clearance.
• Master's degree or equivalent with experience.
• Certifications related to security preferred.

Responsibilities

• Provide SME for risk assessments in Agile SDLC contexts.
• Advocate secure practices within application portfolios.
• Secure OS, database, app server, load balancer and web server layers; manage PKI/TLS concepts.
• Coordinate remediation across development and security assurance teams.
• Document findings and remediation strategies for the enterprise KB.
• Support SOC with scan analysis and remediation coordination.

Skills

Vuln assessment

Security testing

Threat modeling

Network security

Python scripting

DevSecOps

Education

Master's Degree

Bachelor's Degree

No degree

Tools

Invicti

WebInspect

DAST/IAST

JIRA

ServiceNow

AWS

Azure GovClouds

Job description

Steampunk, Inc. in McLean, VA is seeking a Web Application Security Engineer to remediate portfolio-wide vulnerabilities across enterprise applications. You will work with system admin teams to harden environments and enhance vulnerability management.

In an Agile setting, you will develop proactive security solutions, document findings, and socialize remediation strategies. Strong broad experience across OS, databases, app servers, PKI/TLS, and cloud are valued.