Senior DevSecOps Security Engineer

Global Solutions Consulting LLC.; Baltimore (MD); On-site; USD 120,000 - 150,000; Full time

Job summary

A reputable cybersecurity firm in Washington, DC seeks a Senior Security Application Engineer to support government-related cybersecurity services. The position requires strong communication skills, extensive experience in application security, and knowledge of secure coding standards. Candidates must have at least ten years' experience in the industry along with relevant certifications. This full-time role prioritizes individuals with a public trust clearance and focuses on safeguarding systems through robust CI/CD practices and vulnerability management.

Qualifications

• At least 10 years of experience in cybersecurity or information technology.
• Minimum of 5 years in vulnerability management and application security.
• CISSP, OSCP, or DevSecOps related certification held.

Responsibilities

• Develop and implement DevSecOps strategies for secure CI/CD pipelines.
• Review source code for vulnerabilities and perform security assessments.
• Establish secure coding standards and best practices.

Skills

Strong written and verbal communication skills

GitLab CI/CD pipeline experience

Strong analytical skills

Experience in vulnerability management

Application security and software development skills

Knowledge of security frameworks (OWASP, NIST)

Experience with cloud-based infrastructure

Managing incident handling

Education

Bachelor's degree in cybersecurity or information technology

Tools

SAST

DAST

IAST

SCA

CICD security tools

Job description

A reputable cybersecurity firm in Washington, DC seeks a Senior Security Application Engineer to support government-related cybersecurity services. The position requires strong communication skills, extensive experience in application security, and knowledge of secure coding standards. Candidates must have at least ten years' experience in the industry along with relevant certifications. This full-time role prioritizes individuals with a public trust clearance and focuses on safeguarding systems through robust CI/CD practices and vulnerability management.