Remote Web Security Engineer - DevSecOps & FedRAMP

United States Digital Space LLC; United States; Remote; USD 77,800 - 85,341; Full time

Job summary

United States Digital Space LLC seeks a Web Developer Security Engineer to embed security across the SDLC for a federal agency client. You will identify and remediate vulnerabilities in web applications and APIs, integrate security controls into architectures, and support compliance with federal cybersecurity frameworks—operating at the intersection of development and security.

The role requires 3+ years in AppSec/SSDLC, proficiency in .NET stack, frontend tech, REST APIs, SQL, and hands-on WAF

Qualifications

• 3+ years of Web Application Security/SSDLC.
• Proficiency in .NET (C# MVC, WCF), HTML5, CSS3, JavaScript, REST APIs, and SQL.
• Strong understanding of OWASP Top 10 and secure coding standards.
• Experience deploying and managing WAF solutions for custom‑developed web applications.
• Experience configuring FIM solutions for web content and application directories.
• Familiarity with security testing tools, including Wireshark, SIEM, IDS/IPS, NDR, and EDR.
• Ability to leverage AI‑assisted development tools for security automation and compliance auditing.
• Experience implementing DevSecOps principles, including security gate integration in CI/CD pipelines.
• Active security certifications across AppSec, offensive security, and foundational security domains, maintained for a minimum of 5 years.

Responsibilities

• Identify, analyze, and remediate vulnerabilities in web applications and APIs.
• Drive end-to-end vulnerability lifecycle management, including threat modeling, security assessments, and validation of remediation.
• Integrate security controls into application architectures and APIs; advise on secure design patterns and data protection mechanisms.
• Review and analyze web server and application logs to detect anomalies; implement threat intelligence automation.
• Deploy, tune, and maintain Web Application Firewalls (WAF) for custom‑developed apps.
• Configure and manage File Integrity Monitoring (FIM) solutions for web content directories.
• Implement DevSecOps principles throughout the CI/CD pipeline; develop security metrics and compliance reporting.
• Ensure compliance with NIST SP 800‑53, FISMA, and FedRAMP; participate in audits and risk assessments.

Skills

Web App Security

AppSec Engineering

Security Automation

DevSecOps

CI/CD Security

Threat Modeling

Security Tools

AI-Assisted Dev

Tools

AWS

Docker

Kubernetes

Job description

United States Digital Space LLC seeks a Web Developer Security Engineer to embed security across the SDLC for a federal agency client. You will identify and remediate vulnerabilities in web applications and APIs, integrate security controls into architectures, and support compliance with federal cybersecurity frameworks—operating at the intersection of development and security.

The role requires 3+ years in AppSec/SSDLC, proficiency in .NET stack, frontend tech, REST APIs, SQL, and hands-on WAF