Web Application Security Engineer – Vulnerability & Automation

Steampunk; McLean (VA); On-site; USD 100,000 - 155,000; Full time

Job summary

Steampunk in McLean, VA is seeking a Web Application Security Engineer to deliver risk-based remediation across enterprise applications. You will collaborate with IT and development teams to harden environments, assess vulnerabilities, and design proactive controls that improve overall security posture.

The ideal candidate will hold a U.S. government security clearance or be eligible, bring experience with PKI/TLS, DevSecOps tools, and automation with Python, and be capable of translating

Qualifications

• Ability to obtain a U.S. government Security Clearance.
• Experience with building and securing enterprise applications.
• Strong knowledge of security testing tools and automation.

Responsibilities

• Provide subject matter expertise for risk assessments in an Agile environment.
• Advocate secure practices within application development portfolios.
• Secure OS, Database, App Server, Load Balancer, and Web Server layers.
• Remediate findings and baselines; socialize remediation solutions.
• Support SOC with scan analysis and partner with development teams.
• Document findings in an enterprise knowledge base.

Skills

Security mindset

Python automation

Vulnerability remediation

Education

Master's degree + 3 years

Bachelor's degree + 5 years

No degree + 9 years

Tools

AWS GovClouds

Azure GovClouds

JIRA

ServiceNow

Invicti

WebInspect

Job description

Steampunk in McLean, VA is seeking a Web Application Security Engineer to deliver risk-based remediation across enterprise applications. You will collaborate with IT and development teams to harden environments, assess vulnerabilities, and design proactive controls that improve overall security posture.

The ideal candidate will hold a U.S. government security clearance or be eligible, bring experience with PKI/TLS, DevSecOps tools, and automation with Python, and be capable of translating