Secure Web Developer & DevSecOps Engineer

Nationwide IT Services; Washington (District of Columbia); Hybrid; USD 100,000 - 120,000; Full time

Job summary

Nationwide IT Services is seeking a Web Developer Security Engineer to support application security initiatives across web applications and APIs. The role involves secure application design, vulnerability management, and DevSecOps integration.

Applicants should have at least 3 years of experience in Application Security and be proficient in OWASP Top 10 vulnerabilities. This position offers a remote/hybrid work option and requires various certifications in security practices.

Qualifications

• 3+ years of experience in Application Security and Secure Software Development Lifecycle.
• Strong knowledge of OWASP Top 10 vulnerabilities.
• Experience in vulnerability lifecycle management.
• Hands-on experience with Web Application Firewall deployment and configuration.
• Experience supporting environments governed by NIST SP 800-53, FISMA, and FedRAMP.

Responsibilities

• Perform application security reviews and threat modeling.
• Conduct vulnerability assessments and oversee remediation efforts.
• Implement and maintain security controls within CI/CD pipelines.
• Analyze logs and investigate security events.

Skills

Application Security

Secure Software Development Lifecycle

Web Application Security Principles

Vulnerability Management

DevSecOps Integration

Security Monitoring

Web Application Firewall

File Integrity Monitoring

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering

Tools

.NET Technologies: C#, ASP.NET MVC, WCF

Front-End: HTML5, CSS3, JavaScript, React, TypeScript

APIs & Databases: REST APIs, SQL

Programming/Scripting: Python, Node.js, Java

Cloud & Container Security: AWS, Docker, Kubernetes

Security Tools: SIEM, IDS/IPS, NDR, EDR

Job description

Nationwide IT Services is seeking a Web Developer Security Engineer to support application security initiatives across web applications and APIs. The role involves secure application design, vulnerability management, and DevSecOps integration.

Applicants should have at least 3 years of experience in Application Security and be proficient in OWASP Top 10 vulnerabilities. This position offers a remote/hybrid work option and requires various certifications in security practices.