Sr. IT Application Security Engineer

Creative Solutions Services, LLC; Reston (VA); Hybrid; USD 108,000 - 180,000; Full time

Job summary

Career Developers Inc. is seeking a Senior Security Engineer with a strong hands-on application security background to design, implement, and improve security controls across enterprise applications and supporting platforms.

You will work with Development, DevOps, Operations, and Information Security teams to embed security throughout the SDLC and CI/CD processes, strengthen web and API security, and identify and mitigate vulnerabilities.

Qualifications

• 6 to 8 years of Application Security experience in enterprise environments.
• Hands-on web application security, vulnerability assessments, and penetration testing.
• Strong knowledge of OWASP Top 10 vulnerabilities.
• Experience with WAF and API security, policy design and rule tuning.
• Experience securing SDLC/CI/CD environments and cloud/on-premises platforms.

Responsibilities

• Develop and maintain application security policies, procedures, and controls.
• Design and operate WAF and API security controls and tune rules.
• Conduct web app security scans, vulnerability assessments, and pen tests.
• Collaborate with DevOps to secure CI/CD pipelines and deployment processes.
• Identify vulnerabilities, perform risk assessments, and recommend remediation.
• Support container security, runtime hardening, and image scanning.
• Develop security monitoring across the application stack and respond to incidents.
• Communicate security risks and priorities to IT leadership.

Skills

Web app security

Vulnerability assessments

Penetration testing

OWASP Top 10

WAF security

API security

CI/CD security

Cloud security

Education

Bachelor's Degree in Information Security

Job description

Career Developers Inc., a distinguished staffing and consulting firm, is proud to celebrate 30 years of service excellence. As a GSA Contract holder, we offer comprehensive staffing solutions for both commercial and government sectors nationwide. By selectively partnering with clients who share our values, we ensure productive collaborations that set us apart in the industry. Our dedication to candidates involves managing expectations with precision through business intelligence, thorough interview preparation, transparent communication, and exceptional feedback throughout the process.

We are committed to advancing your career and look forward to supporting your professional growth.

Senior IT Application Security Engineer (SME)

DEPARTMENT: Information Technology

REPORTS TO: Director, Information Security

LOCATION: Hybrid/Reston, VA – 3 days on-site in the office per week (Tues/Wed)

SALARY: 150-180K + 7% Bonus

Must have the following skills to be considered for this position:

• Senior level, hands-on experience with conducting web application security scans, vulnerability assessments andpenetration testing on applications.

Position Overview

Our client is seeking a Senior Security Engineer with a strong hands-on Application Security background. This role will focus on designing, implementing, operating, and improving security controls across enterprise applications and supporting platforms.

The Senior Security Engineer will work closely with Development, DevOps, Operations, and Information Security teams to embed security throughout the SDLC and CI/CD process, strengthen web and API security, and identify and mitigate application vulnerabilities.

Responsibilities

• Develop and maintain application security policies, procedures, and controls
• Partner with DevOps to build and maintain secure CI/CD pipelines
• Design and operate WAF and API security controls
• Tune security rules, reduce false positives, and automate policy updates
• Conduct web application security scans, vulnerability assessments, and penetration testing
• Identify application vulnerabilities, perform risk assessments, and recommend remediation
• Support container security, including runtime hardening, image scanning, and vulnerability assessments
• Develop security monitoring across the application stack
• Investigate application security incidents
• Work with IT leadership to communicate security risks and priorities

Required Experience

• 6 to 8 years of Application Security experience within enterprise environments
• Strong hands on web application security experience
• Strong knowledge of OWASP Top 10 vulnerabilities
• Experience with WAF and API security, including policy design and rule tuning
• Experience with application vulnerability scanning, security assessments and/or penetration testing
• Experience with container security, image scanning, and runtime hardening
• Experience securing SDLC and CI/CD environments
• Knowledge of OAuth, OpenID, authentication, and authorization services
• Experience operating cloud and/or on premises security platforms
• Ability to troubleshoot security and network related issues
• Strong communication skills with the ability to work across Development, DevOps, Operations, and Security teams

Education

Bachelor's Degree in Information Security, Computer Science, Computer Engineering, Electrical Engineering, or equivalent professional experience.

Candidates must be eligible to work in the United States.