Senior Application Security Engineer — SDLC & WAF/API

Creative Solutions Services, LLC; Reston (VA); Hybrid; USD 108,000 - 180,000; Full time

Job summary

Career Developers Inc. is seeking a Senior Security Engineer with a strong hands-on application security background to design, implement, and improve security controls across enterprise applications and supporting platforms.

You will work with Development, DevOps, Operations, and Information Security teams to embed security throughout the SDLC and CI/CD processes, strengthen web and API security, and identify and mitigate vulnerabilities.

Qualifications

• 6 to 8 years of Application Security experience in enterprise environments.
• Hands-on web application security, vulnerability assessments, and penetration testing.
• Strong knowledge of OWASP Top 10 vulnerabilities.
• Experience with WAF and API security, policy design and rule tuning.
• Experience securing SDLC/CI/CD environments and cloud/on-premises platforms.

Responsibilities

• Develop and maintain application security policies, procedures, and controls.
• Design and operate WAF and API security controls and tune rules.
• Conduct web app security scans, vulnerability assessments, and pen tests.
• Collaborate with DevOps to secure CI/CD pipelines and deployment processes.
• Identify vulnerabilities, perform risk assessments, and recommend remediation.
• Support container security, runtime hardening, and image scanning.
• Develop security monitoring across the application stack and respond to incidents.
• Communicate security risks and priorities to IT leadership.

Skills

Web app security

Vulnerability assessments

Penetration testing

OWASP Top 10

WAF security

API security

CI/CD security

Cloud security

Education

Bachelor's Degree in Information Security

Job description

Career Developers Inc. is seeking a Senior Security Engineer with a strong hands-on application security background to design, implement, and improve security controls across enterprise applications and supporting platforms.

You will work with Development, DevOps, Operations, and Information Security teams to embed security throughout the SDLC and CI/CD processes, strengthen web and API security, and identify and mitigate vulnerabilities.