Web Security Engineer: Secure Web Apps & APIs

E-Logic, Inc.; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

E-Logic, Inc. is seeking a highly skilled Web Developer Security Engineer to support the Congressional Budget Office (CBO) under the SENTRY BPA. You will embed security into the SDLC and protect web apps, APIs, and data from vulnerabilities and misconfigurations.

Responsibilities include threat modeling, secure design, monitoring, incident response, automation with Python/Node.js, and compliance with NIST/FedRAMP. Requires US citizenship and eligibility for Public Trust Tier 2 clearance.

Qualifications

• Must hold certifications in CSSLP/GWEB/CASE, OSWE/OSCP, and Security+/GSEC, each for at least 5 years.
• Eligible for a Public Trust Tier 2 clearance (background check via U.S. Capitol Police).
• 3+ years of Web Application Security, AppSec, or SSDLC experience.
• Hands-on with modern web tech: .NET/C# MVC, HTML5, CSS3, JavaScript, REST APIs, SQL.
• Proficient with AI-assisted dev tools (GitHub Copilot, OpenAI Codex) and scripting (Python, JS/Node.js, Java, React, TS).

Responsibilities

• Identify and remediate critical vulnerabilities, logic flaws, and insecure dependencies.
• Drive end-to-end vulnerability lifecycle, threat modeling, and security assessments.
• Advise on secure design patterns and data protection across architectures and APIs.
• Monitor logs, detect anomalies, and support incident response for security events.
• Implement automation for threat intel integration and security gate enforcement.
• Ensure compliance with NIST SP 800-53, FISMA, and FedRAMP where applicable.

Skills

C# MVC

JavaScript/Node.js

REST APIs

Security Testing

OWASP Top10

WAFs

Python

CI/CD Security

Threat Modeling

Education

Bachelor's degree in CS or related

Tools

GitHub Copilot

OpenAI Codex

Wireshark

SIEM

IDS/IPS

NDR

EDR

Docker

Kubernetes

Job description

E-Logic, Inc. is seeking a highly skilled Web Developer Security Engineer to support the Congressional Budget Office (CBO) under the SENTRY BPA. You will embed security into the SDLC and protect web apps, APIs, and data from vulnerabilities and misconfigurations.

Responsibilities include threat modeling, secure design, monitoring, incident response, automation with Python/Node.js, and compliance with NIST/FedRAMP. Requires US citizenship and eligibility for Public Trust Tier 2 clearance.