SW Cyber Security Engineer (Mid-Level)

Glint Tech Solutions; Reston (VA); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Glint Tech Solutions is seeking a mid-level Cyber Security Engineer focused on software applications. This role involves application security testing and securing AWS cloud environments, demanding hands-on experience with Secure SDLC and DevSecOps practices.

The position requires residency in the DMV area, with collaboration across various platforms such as Kubernetes and Jenkins. Ideal candidates will bring strong skills in Java, vulnerability management, and a proactive approach to security challenges.

Qualifications

• Hands-on application security, secure SDLC, and DevSecOps experience.
• Proficiency in Java, JavaScript, or Python focusing on secure coding and vulnerability management.
• Strong understanding of Linux/Windows operating systems and networking protocols.
• Experience integrating security tooling with Jira, ServiceNow, or similar platforms.

Responsibilities

• Perform application security testing using various tools within a Java/AWS environment.
• Support secure SDLC, DevSecOps practices, and CI/CD pipeline security automation.
• Identify, triage, validate, and prioritize vulnerability remediation using a risk-based approach.
• Secure AWS cloud environments and support container security across Kubernetes, Helm, and Docker.
• Collaborate across CI/CD and source code management platforms.

Skills

Application security

Secure SDLC

DevSecOps

Java

JavaScript

Python

Kubernetes

AWS Cloud Security

Vulnerability Management

Tools

Checkmarx

Contrast Security

TideLift

Burp Suite

OWASP Dependency Check

Fortify

Jira

ServiceNow

Bitbucket

GitLab

GitHub

Jenkins

Job description

SW Cyber Security Engineer (Mid-Level)

Location: Hybrid – DMV area (DC, MD, VA) | Monthly onsite in Reston, VA

Project Description

Our client, a leading healthcare payor, is seeking a mid-level Software Application-focused Cyber Security Engineer with strong AWS Cloud Vulnerability Management and application security testing experience. Candidates must reside in the DC, MD, or VA area.

Key Responsibilities

• Perform application security testing using tools such as Checkmarx, Contrast Security, TideLift, Burp Suite, OWASP Dependency Check, or Fortify within a Java/AWS environment
• Support secure SDLC, DevSecOps practices, and CI/CD pipeline security automation
• Identify, triage, validate, and prioritize vulnerability remediation using a risk-based approach
• Secure AWS cloud environments and support container security across Kubernetes, Helm, and Docker
• Integrate security automation and metrics reporting with Jira, ServiceNow, or risk management platforms
• Collaborate across CI/CD and source code management platforms including Bitbucket, GitLab, GitHub, and Jenkins

Mandatory Skills

• Hands-on application security, secure SDLC, and DevSecOps experience
• Proficiency in Java, JavaScript, or Python with a focus on secure coding and vulnerability management
• Strong understanding of Linux/Windows operating systems and networking protocols
• Experience with container security — Kubernetes, Helm, and Docker
• Hands-on AWS cloud security experience
• Familiarity with application security testing tools — Checkmarx, Contrast Security, TideLift, Burp Suite, OWASP Dependency Check, or Fortify
• Experience with CI/CD and SCM platforms — Bitbucket, GitLab, GitHub, Jenkins
• Experience integrating security tooling with Jira, ServiceNow, or similar platforms

Nice-to-Have Skills

• OSCP or CEH certification preferred
• Healthcare or regulated industry background