Senior Application Security Engineer - Hybrid, Reston

Creative Solutions Services, LLC; Reston (VA); Hybrid; USD 150,000 - 180,000; Full time

Job summary

Career Developers Inc. is seeking a Senior IT Application Security Engineer (SME) to design, implement, operate and improve security controls across enterprise applications and supporting platforms.

Hybrid role in Reston, VA with 3 on-site days per week (Tue/Wed); reports to the Director, Information Security. Requires 6–8 years of hands-on application security experience and strong knowledge of OWASP Top 10.

Qualifications

• 6 to 8 years of Application Security experience in enterprise environments.
• Strong hands-on web application security experience.
• Knowledge of OWASP Top 10 vulnerabilities.
• Experience with WAF and API security design and tuning.
• Experience with vulnerability scanning, security assessments, and/or penetration testing.
• Container security, image scanning, and runtime hardening.
• Experience securing SDLC and CI/CD environments.
• Knowledge of OAuth, OpenID, authentication, and authorization services.
• Experience operating cloud and/or on premises security platforms.
• Strong communication skills across development, DevOps, operations and security teams.

Responsibilities

• Develop and maintain application security policies, procedures, and controls
• Partner with DevOps to build and maintain secure CI/CD pipelines
• Design and operate WAF and API security controls
• Tune security rules, reduce false positives, and automate policy updates
• Conduct web application security scans, vulnerability assessments, and penetration testing
• Identify application vulnerabilities, perform risk assessments, and recommend remediation
• Support container security, including runtime hardening, image scanning, and vulnerability assessments
• Develop security monitoring across the application stack
• Investigate application security incidents
• Work with IT leadership to communicate security risks and priorities

Skills

Web app security

Vulnerability assessments

Penetration testing

OWASP Top 10

CI/CD security

WAF & API security

Container security

Cloud security

Cross-team communication

Education

Bachelor's degree

Job description

Career Developers Inc. is seeking a Senior IT Application Security Engineer (SME) to design, implement, operate and improve security controls across enterprise applications and supporting platforms.

Hybrid role in Reston, VA with 3 on-site days per week (Tue/Wed); reports to the Director, Information Security. Requires 6–8 years of hands-on application security experience and strong knowledge of OWASP Top 10.