Senior Security Engineer - Secure SDLC & WAF Specialist

ADP, Inc.; Reston (VA); On-site; USD 140,000 - 202,000; Full time

Job summary

The Senior Security Engineer at Federal Home Loan Banks Office of Finance is based in Reston, VA and partners with development, DevOps, and operations teams to embed security into the SDLC and CI/CD pipelines.

You will strengthen web/API protections, operate a web application firewall, and drive proactive detection, while aligning with our core security engineering capabilities across cloud and on‑prem platforms.

Qualifications

• 6 to 8 years of experience in application security.
• Hands‑on with web app security, including OWASP Top 10.
• WAF/API security design, rule tuning, automation.
• Vulnerability assessments and penetration testing experience.
• Experience with OAuth/OpenID and on‑prem or cloud security platforms.

Responsibilities

• Develop and maintain software application security policies and procedures.
• Implement software application security controls.
• Partner with DevOps in developing a secure CI/CD pipeline.
• Design and operate WAF and API protections; tune rules, reduce false positives, and automate policy updates.
• Identify application security vulnerabilities and issues, perform risk assessments and provide mitigations.
• Develop security monitoring for application stack.
• Conduct technical investigations of application security incidents.
• Interface with senior stakeholders across the IT leadership team to proactively interpret risks and priorities.
• Support the OF’s diversity and inclusion strategy by following policies and procedures that ensure opportunities for employees and diverse business partners.
• Assist with other job duties as assigned.

Skills

Web application security

OWASP Top 10

WAF/API security

Container security

Vulnerability assessment

OAuth / OpenID

Cloud/on‑prem security

Education

Bachelor's Degree in Information Security or CS or related field

Job description

The Senior Security Engineer at Federal Home Loan Banks Office of Finance is based in Reston, VA and partners with development, DevOps, and operations teams to embed security into the SDLC and CI/CD pipelines.

You will strengthen web/API protections, operate a web application firewall, and drive proactive detection, while aligning with our core security engineering capabilities across cloud and on‑prem platforms.