Senior Application Security Engineer - Cloud & SDLC

Default (MSD); Rockville (MD); Hybrid; USD 101,000 - 155,000; Full time

Job summary

MSD is seeking a Senior Cybersecurity Engineer, Applications, to strengthen our cybersecurity posture with a focus on securing software and deployment environments. The role spans threat modeling, secure design reviews, and integration of security into the development lifecycle across AWS and container platforms.

You will collaborate with engineering and architecture teams, stay current on industry trends, and help advance our broader cybersecurity program.

Qualifications

• 5+ years of cybersecurity experience with depth in application security.
• Experience securing Java or .NET applications.
• Experience in regulated environments is preferred.
• Industry certs such as CISSP, OSCP, GWAPT, GWEB, OSWE are a plus.

Responsibilities

• Analyze, investigate, respond to, and recover from cybersecurity incidents per the incident response lifecycle.
• Remediate application vulnerabilities and guide engineering teams to take preventative measures.
• Integrate security into the software development lifecycle (SAST/DAST/SSA) within build pipelines.
• Conduct threat modeling and secure design reviews for new and existing applications.
• Represent security in architecture reviews and CAB to ensure security considerations are addressed.
• Assess and improve security of hosting environments including AWS workloads and containerized platforms.
• Coordinate external application penetration testing and manage findings through remediation.
• Engineer security solutions to mitigate risk and improve MSD's security posture.
• Assist with evaluation of security technologies to expand MSD’s cybersecurity portfolio.
• Stay updated on Application Security and Cloud industry trends via conferences and training.
• Provide hands-on cybersecurity support and collect security metrics.

Skills

Secure coding

OWASP Top 10

Cloud security

Threat modeling

Scripting

Communication skills

AWS security

Education

Bachelor's degree

Job description

MSD is seeking a Senior Cybersecurity Engineer, Applications, to strengthen our cybersecurity posture with a focus on securing software and deployment environments. The role spans threat modeling, secure design reviews, and integration of security into the development lifecycle across AWS and container platforms.

You will collaborate with engineering and architecture teams, stay current on industry trends, and help advance our broader cybersecurity program.