Onsite Application Security Engineer — Cloud & DevSecOps

Bespoke Technologies; Reston (VA); Presencial; USD 130 000 - 180 000; Tempo integral

Resumo da oferta

Bespoke Technologies is seeking an experienced Application Security Engineer for an on-site Reston, VA contract. The role focuses on integrating security across the software development lifecycle, partnering with developers and cloud engineers to design, build, assess, and sustain secure mission applications in a cloud-native environment.

Required: 8+ years in application security or related fields, strong knowledge of SAST/DAST/SCA, and experience with Kubernetes, Docker, and CI/CD pipelines.

Qualificações

• Experience integrating security across the software development lifecycle including secure design reviews.
• Experience with application security testing tools and processes (SAST/DAST/SCA).
• Experience building and securing cloud-native apps and services using Kubernetes, containers, and CI/CD pipelines.

Responsabilidades

• Integrate security throughout the software development lifecycle and partner with developers and cloud engineers to design, build, assess and sustain secure mission applications.
• Assess, prioritize, document and communicate security risks, findings and remediation to technical and non-technical stakeholders.
• Support release authorization and secure deployment in cloud environments.

Conhecimentos

Application security

Secure SDLC

Security testing tools

Kubernetes

Docker

CI/CD pipelines

Threat modeling

NIST/OWASP

RDBMS security

Agile

Formação académica

Bachelor’s degree in engineering, computer science or related technical discipline

Ferramentas

OCI (Oracle Cloud Infrastructure)

Descrição da oferta de emprego

Bespoke Technologies is seeking an experienced Application Security Engineer for an on-site Reston, VA contract. The role focuses on integrating security across the software development lifecycle, partnering with developers and cloud engineers to design, build, assess, and sustain secure mission applications in a cloud-native environment.

Required: 8+ years in application security or related fields, strong knowledge of SAST/DAST/SCA, and experience with Kubernetes, Docker, and CI/CD pipelines.