Senior Application Security Engineer — SDLC & CI/CD

Federal-Home-Loan-Banks-Office-of-Finance; Reston (VA); On-site; USD 140,000 - 202,000; Full time

Job summary

The Senior Security Engineer at Federal Home Loan Banks Office of Finance focuses on embedding security into the SDLC and CI/CD pipelines, strengthening web/API protections, and enabling proactive detection. The role collaborates with development, DevOps, and operations to build secure-by-default applications and services.

In this position, you will design and implement security controls, lead risk assessments, and contribute to security monitoring across the application stack while aligning

Qualifications

• Minimum 6–8 years of experience in Application Security (designing, implementing, and operating security controls).
• Hands-on experience with web application security, including OWASP Top 10 vulnerabilities.
• Hands-on experience with WAF/API security (policy design, rule tuning, automation), container security.
• Hands-on experience with web application security scans, vulnerability assessments and/or penetration testing.
• Experience with authentication/authorization services like OAuth and OpenID.
• Experience operating on‑prem or cloud security platforms.

Responsibilities

• Develop and maintain software application security policies and procedures.
• Implement software application security controls.
• Partner with DevOps to develop a secure CI/CD pipeline.
• Design and operate WAF and API protections; tune rules and automate policy updates.
• Identify vulnerabilities and perform risk assessments with mitigations.
• Develop security monitoring for the application stack.
• Investigate application security incidents.
• Interface with IT leadership to interpret risks and priorities.

Skills

Application security

OWASP Top 10

OAuth/OpenID

Cloud security

Security incident response

Security policy

Stakeholder communication

Education

Bachelor's Degree in Information Security or Computer Science or Computer/Electrical Engineering

Tools

WAF

Vulnerability scanning tools

CI/CD security tooling

Job description

The Senior Security Engineer at Federal Home Loan Banks Office of Finance focuses on embedding security into the SDLC and CI/CD pipelines, strengthening web/API protections, and enabling proactive detection. The role collaborates with development, DevOps, and operations to build secure-by-default applications and services.

In this position, you will design and implement security controls, lead risk assessments, and contribute to security monitoring across the application stack while aligning