Web Security Engineer | DevSecOps Specialist

E Logic; Washington (District of Columbia); On-site; USD 120,000 - 160,000; Full time

Job summary

E-Logic, Inc. is seeking a Web Developer Security Engineer to protect mission-critical web applications, APIs, and sensitive data as part of the CBO program.

You’ll embed security into the SDLC, identify and remediate vulnerabilities, and drive the vulnerability lifecycle across the stack. Responsibilities include secure design, monitoring and incident response, automation with AI-assisted tools, and ensuring compliance with federal frameworks.

Qualifications

• Must hold certifications in CSSLP/GWEB/CASE, OSWE/OSCP, and Security+ or GSEC with at least 5 years maintained.
• Must be eligible for Public Trust Tier 2 clearance (background check through U.S. Capitol Police).
• Minimum of 3 years in Web App Security/SSDLC.
• Hands-on with .NET (C# MVC, WCF), HTML5/CSS3/JS, REST APIs, SQL.

Responsibilities

• Identify and neutralize web vulnerabilities, logic flaws, insecure dependencies, and misconfigurations.
• Drive end-to-end vulnerability lifecycle including threat modeling and security assessments.
• Advise on secure design patterns and data protection mechanisms for applications and APIs.
• Monitor web servers and applications to detect anomalies and support incident response.
• Implement automation for threat intelligence integration and security governance using Python/JS.
• Ensure compliance with NIST SP 800-53, FISMA, and FedRAMP where applicable.

Skills

OWASP Top 10

Secure coding standards

Threat modeling

CI/CD security

Python

JavaScript/Node.js

TypeScript

AWS security

WAFs/FIM

Security testing tools

Education

Bachelor's degree in CS/Cybersecurity/Engineering

Tools

GitHub Copilot

OpenAI Codex

Wireshark

SIEM

IDS/IPS

NDR/EDR

Job description

E-Logic, Inc. is seeking a Web Developer Security Engineer to protect mission-critical web applications, APIs, and sensitive data as part of the CBO program.

You’ll embed security into the SDLC, identify and remediate vulnerabilities, and drive the vulnerability lifecycle across the stack. Responsibilities include secure design, monitoring and incident response, automation with AI-assisted tools, and ensuring compliance with federal frameworks.