Remote Web Security Engineer: DevSecOps for Federal Apps

careers-dminc; United States; On-site; USD 70,020 - 85,580; Full time

Job summary

DMI is seeking a Web Developer Security Engineer to embed security across the SDLC for a federal agency client. You will identify and remediate vulnerabilities in web apps and APIs and integrate security controls into application architectures, supporting compliance with federal cybersecurity frameworks.

You will drive end-to-end vulnerability lifecycle management, deploy and tune WAFs, configure FIM, and implement security gate automation in CI/CD pipelines while ensuring audits and risk

Qualifications

• Bachelor’s degree or higher in a related field.
• 3+ years in Web Application Security/AppSec/SSDLC.
• Proficiency in .NET, HTML5, CSS3, JS, REST APIs, and SQL.
• Strong OWASP Top 10 knowledge and secure coding standards.
• Experience with WAF, FIM, and DevSecOps in CI/CD pipelines.
• Active security certifications in AppSec/offensive security are preferred.

Responsibilities

• Identify and remediate vulnerabilities in web apps and APIs.
• Integrate security controls into architectures and guide secure design.
• Lead vulnerability lifecycle management and remediation validation.
• Review logs to detect anomalies and indicators of compromise.
• Deploy and tune Web Application Firewalls for custom apps.
• Configure FIM solutions for web content directories.
• Implement DevSecOps practices and security metrics for audits.
• Ensure compliance with NIST SP 800-53, FISMA, FedRAMP; participate in audits.
• Provide Tier II security operations support and improvements.

Skills

.NET/C#

HTML5

CSS3

JavaScript

REST APIs

SQL

OWASP Top 10

DevSecOps

Threat modeling

CI/CD security gates

AI-assisted tooling

Education

Bachelor's degree or higher in Computer Science, Cybersecurity, Information Systems, Engineering, or related field

Tools

WAF

Docker

Kubernetes

Job description

DMI is seeking a Web Developer Security Engineer to embed security across the SDLC for a federal agency client. You will identify and remediate vulnerabilities in web apps and APIs and integrate security controls into application architectures, supporting compliance with federal cybersecurity frameworks.

You will drive end-to-end vulnerability lifecycle management, deploy and tune WAFs, configure FIM, and implement security gate automation in CI/CD pipelines while ensuring audits and risk