Web App Security Engineer • DevSecOps (Hybrid)

Essnova Solutions, Inc.; Washington (Washington County); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Essnova Solutions, Inc. is seeking an experienced Web Application Security Engineer to support a federal customer by embedding security across the SDLC and protecting enterprise web apps and APIs from evolving cyber threats.

The candidate should have hands-on experience with secure SDLC, vulnerability assessments, threat modeling, and CI/CD integration in DevSecOps environments. Federal framework familiarity is required.

Qualifications

• Experience in Application Security (AppSec), Web Application Security, or Product Security.
• Strong knowledge of secure software development practices and Secure SDLC.
• Experience performing vulnerability assessments, threat modeling, and application security testing.
• Knowledge of OWASP Top 10, common web application vulnerabilities, and remediation techniques.
• Experience implementing or supporting Web Application Firewalls (WAF).
• Experience integrating security into CI/CD pipelines and DevSecOps environments.
• Familiarity with federal cybersecurity frameworks including NIST and FedRAMP.
• Excellent analytical, troubleshooting, and communication skills.

Responsibilities

• Embed security throughout the Software Development Lifecycle (SDLC).
• Perform web application vulnerability assessments, penetration support, and threat modeling activities.
• Identify, prioritize, and remediate application security vulnerabilities.
• Implement secure coding standards aligned with OWASP Top 10 and industry best practices.
• Configure and maintain Web Application Firewalls (WAF) and application security controls.
• Integrate application security tools into CI/CD pipelines and DevSecOps workflows.
• Monitor application logs and investigate security events affecting web applications and APIs.
• Collaborate with software developers, DevOps engineers, and cybersecurity teams to improve application security posture.
• Support compliance with NIST, FISMA, FedRAMP, and other federal cybersecurity standards.

Skills

Web Application Security

AppSec

Secure SDLC

Vulnerability assessment

Threat modeling

OWASP Top 10

CI/CD integration

DevSecOps

Analytical skills

Education

CSSLP

OSCP

OSWE

GWEB

CASE

Security+

GSEC

Tools

Web Application Firewall (WAF)

SAST

DAST

SCA

CI/CD tooling

Job description

Essnova Solutions, Inc. is seeking an experienced Web Application Security Engineer to support a federal customer by embedding security across the SDLC and protecting enterprise web apps and APIs from evolving cyber threats.

The candidate should have hands-on experience with secure SDLC, vulnerability assessments, threat modeling, and CI/CD integration in DevSecOps environments. Federal framework familiarity is required.