About this role

Embeds security across the SDLC for mission-critical web apps, APIs, and sensitive data.
Identifies/remediates vulnerabilities, logic flaws, insecure dependencies, and misconfigurations;
Drives end-to-end vulnerability lifecycle with threat modeling and validation;
Advises on secure design patterns and protocols;
Analyzes web/app logs for IoCs;
Builds automation for threat-intel integration and incident response;
Deploys/tunes WAF and FIM;
Ensures NIST 800-53 / FISMA / FedRAMP compliance and supports audits and authorization.

Ability to obtain a Federal Security Clearance
Hands-on secure software dev, DevSecOps automation, vulnerability remediation
Log analysis, FIM, WAF management
3+ Web AppSec / AppSec Engineering / SSDLC
Modern web tech incl. .NET (C# MVC, WCF), HTML5, CSS3, JavaScript, REST APIs, SQL; AI-assisted dev tools (Copilot, OpenAI API/Codex) + scripting (Python, JS/Node.js, Java, React.js, TypeScript);
OWASP Top 10 & secure coding;
WAF and FIM deploy/tune;
Security testing tools (Wireshark, SIEM, IDS/IPS, NDR, EDR);
risk assessment;
DevSecOps CI/CD security gates;
security metrics & compliance reporting;
Tier II security ops support.

Web Developer, Security Engineer

Key skills