Proactive Web Application Security Engineer

Steampunk; Bloomington (IL); On-site; USD 100,000 - 155,000; Full time

Job summary

Steampunk seeks a Web Application Security Engineer to provide technical expertise in remediating portfolio-wide vulnerabilities across the enterprise stack. You will work with system admin teams to remediate and harden environments, and help improve security posture through automation and streamlined processes.

The ideal candidate has exposure to OS, database, app server, load balancer, and web server layers, with PKI/TLS knowledge, and can communicate findings to a broad audience.

Qualifications

• Must be able to obtain a U.S. government Security Clearance.
• Master's Degree and 3 years of relevant experience; OR Bachelor's Degree and 5 years of relevant experience; OR No degree and 9 years of relevant experience.
• Possesses at least one professional certification relevant to the technical service provided. Maintain a certification relevant to the product being deployed and/or maintained.

Responsibilities

• Provide subject matter expertise for risk assessments in an Agile SDLC.
• Advocate for secure practices within application development portfolios.
• Secure OS, DB, App Server, Load Balancer and Web Server layers, with PKI/TLS understanding.
• Integrate with development and security assurance to remediate findings.
• Document and socialize security findings and remediation solutions in a knowledge base.
• Support the Information Assurance Branch and the SOC with scan analysis.

Skills

Security Clearance

Python automation

Education

Master's Degree

Bachelor's Degree

No degree

Tools

Maven

Gradle

GIT

Jenkins

Ansible

Java

C#/.NET

Apache Tomcat

Apache HTTP Server

IIS

F5

Oracle

MSSQLServer

PostgreSQL

AWS

Azure GovClouds

Job description

Steampunk seeks a Web Application Security Engineer to provide technical expertise in remediating portfolio-wide vulnerabilities across the enterprise stack. You will work with system admin teams to remediate and harden environments, and help improve security posture through automation and streamlined processes.

The ideal candidate has exposure to OS, database, app server, load balancer, and web server layers, with PKI/TLS knowledge, and can communicate findings to a broad audience.