Talent.com
Web Application Security Engineer

Web Application Security Engineer

ConvergenzMcLean, VA, United States
3 days ago
Job type
  • Full-time
Job description

As a Web Application Security Engineer , you will provide technical expertise and solutions to remediate persistent and challenging portfolio-wide vulnerabilities. We're looking for someone who has passion for IT, resourceful problem-solving abilities, and a desire to learn our indicators of success in this role. The ideal candidate will have a breadth of experience over a variety of application and web based technologies. The candidate will not necessarily have deep experience in all domain areas but should have a good understanding of how the various layers of an enterprise application stack interact with one another. You will work directly with system admin teams to assist and remediate vulnerabilities and harden environments, while providing recommendations on ways to enhance vulnerability management. Additionally, you will work in a team environment to develop proactive solutions to improve overall enterprise security posture through process streamlining and automation.

Responsibilities include :

  • Provide subject matter expertise for various risk assessments, working in an Agile environment with an understanding of the full software development lifecycle.
  • Advocate for and ensure appropriate security practices are communicated and implemented within application development portfolios.
  • Ability and proven experience in securing multiple areas of an enterprise application stack, including the OS, Database, Application Server, Load Balancer, and Web Server layers. Understanding how PKI / TLS certificates work is a must.
  • Integrate with both the application development and security assurance divisions to ensure vulnerability findings are understood, remediated or baselined as appropriate.
  • Document & Socialize security findings and remediation solutions in an enterprise knowledge base.
  • Support the Information Assurance Branch and the SOC with scan analysis and partner with development teams to understand and remediate security findings.

Required :

  • Ability to obtain a U.S. government Security Clearance
  • Master's Degree and 3 years of relevant experience; OR
  • Bachelor's Degree and 5 years of relevant experience; OR

  • No degree and 9 years of relevant experience
  • Possesses at least one professional certification relevant to the technical service provided. Maintain a certification relevant to the product being deployed and / or maintained.
  • Preferred :

  • Former Developer or Systems Administrator experience
  • Working knowledge of technologies used for building and deploying enterprise applications, such as, Maven, Grade, GIT, Jenkins, Ansible, Java, C# / .NET, Apache Tomcat, Apache HTTP Server, IIS, F5, Oracle, MSSQLSEVER, PostGres
  • Working knowledge and experience in AWS and Azure GovClouds
  • Ability to analyze DISA STIG audit compliance scan results and provide recommendations for resolution
  • Analyze security environment, provide recommendations
  • Working knowledge of JIRA, Service Now or equivalent
  • Working knowledge of operating system and dynamic application security testing scan tools - Invicti, Web Inspect, DAST / IAST suites
  • Experience using Python to automate tasks
  • Certifications :

  • CEH, GFACT, GPEN, OSCP or other relevant industry certifications
  • Other Application based Technology specific certifiations
  • Create a job alert for this search

    Application Security Engineer • McLean, VA, United States

    Related jobs
    • Promoted
    Web Application Security Subject-Matter Expert / Technical Lead

    Web Application Security Subject-Matter Expert / Technical Lead

    KellyMitchell GroupBethesda, MD, US
    Full-time
    Our client is seeking a Web Application Security Subject-Matter Expert / Technical Lead to join their team! This position is located in Bethesda, Maryland. Operate web vulnerability assessment tools...Show moreLast updated: 2 days ago
    • Promoted
    Lead Security Engineer - Cyber Security

    Lead Security Engineer - Cyber Security

    RelativityWashington, DC, United States
    Full-time
    As a Lead Cyber Security Engineer, you will ensure the security of Relativity's network and infrastructure.In this role, the main responsibilities will be to investigate and analyze emerging threat...Show moreLast updated: 30+ days ago
    • Promoted
    Web Application Security Subject Matter Expert / Technical Lead

    Web Application Security Subject Matter Expert / Technical Lead

    CybervanceBethesda, MD, United States
    Full-time
    Web Application Security Subject Matter Expert / Technical Lead.Bethesda, MD | Hybrid- Not Remote.Cybervance is a rapidly growing information security and information technology company based in Wa...Show moreLast updated: 19 days ago
    • Promoted
    Advanced Security Engineer - Cyber Security

    Advanced Security Engineer - Cyber Security

    RelativityWashington, DC, United States
    Full-time
    As an Advanced Cyber Security Engineer, you will ensure the security of Relativity's network and infrastructure.In this role, the main responsibilities will be to investigate and analyze emerging t...Show moreLast updated: 30+ days ago
    • Promoted
    Job Application Security Engineer

    Job Application Security Engineer

    Steampunk.comWashington, DC, United States
    Full-time
    Web Application Security Engineer.As a Web Application Security Engineer, you will provide technical expertise and solutions to remediate persistent and challenging portfolio-wide vulnerabilities.W...Show moreLast updated: 3 days ago
    • Promoted
    Technical Security Application Engineer

    Technical Security Application Engineer

    Anduril IndustriesWashington, DC, United States
    Full-time
    Anduril Industries is a defense technology company with a mission to transform U.By bringing the expertise, technology, and business model of the 21st century's most innovative companies to the def...Show moreLast updated: 3 days ago
    • Promoted
    Sr. Application Security Engineer / Sr. Product Security Engineer (Remote)

    Sr. Application Security Engineer / Sr. Product Security Engineer (Remote)

    AuditBoardWashington, DC, United States
    Remote
    Full-time
    Application Security / Product Security Engineer.AuditBoard is looking for a passionate and experienced Sr.Application Security / Product Security Engineer, who will work along product and engineering ...Show moreLast updated: 3 days ago
    • Promoted
    Web Application Developer - Defense

    Web Application Developer - Defense

    Palantir TechnologiesWashington, DC, US
    Full-time
    Palantir builds the world’s leading software for data-driven decisions and operations.By bringing the right data to the people who need it, our platforms empower our partners to develop lifes...Show moreLast updated: 20 days ago
    • Promoted
    Cyber Security Engineer

    Cyber Security Engineer

    Via Logic LLCBethesda, MD, United States
    Full-time
    Leidos has an exciting opening for you, our next.TS / SCI Cyber Security Engineer.Task Orders under the DOMEX Technology Platform (DTP) contract supporting NMEC. Have impact as part of a mission focus...Show moreLast updated: 30+ days ago
    • Promoted
    Application Security Advisor

    Application Security Advisor

    US Tech Solutions, Inc.Reston, VA, US
    Temporary
    Duration : 6+ Months Contract (Hybrid) Description : The role that we are looking for is on the advisor team and what we do is we are integrated into the development squads to help them fix vulnerabi...Show moreLast updated: 30+ days ago
    • Promoted
    Application Security Engineer

    Application Security Engineer

    US Tech SolutionsArlington, VA, United States
    Full-time
    Collaborate with a team of engineers to implement • • • specific security policies in the CI / CD security tools including but not limited to SAST, DAST and SCA applications. Work with Development, DevO...Show moreLast updated: 3 days ago
    • Promoted
    Application Security (AppSec) Specialists

    Application Security (AppSec) Specialists

    eTeamArlington, VA, United States
    Temporary
    Job Title- Application Security (AppSec) Specialist.Location : Arlington, VA - Buffalo, NY - Des Moines, IA - Louisville, KY - Omaha, NE - Milwaukee, WI. Job Description - Application Security (AppSe...Show moreLast updated: 3 days ago
    Web Application Security SME / Technical Lead - NIH

    Web Application Security SME / Technical Lead - NIH

    cFocus Software IncorporatedRockville, MD, US
    Full-time
    Quick Apply
    Web Application Security Subject-Matter Expert / Technical Lead Overview cFocus Software is seeking a Web Application Security Subject-Matter Expert (SME) / Technical Lead to provide advanced techn...Show moreLast updated: 24 days ago
    • Promoted
    Application Security Engineer

    Application Security Engineer

    Steampunk.comMcLean, VA, United States
    Full-time
    Web Application Security Engineer.We're looking for someone who has passion for IT, resourceful problem-solving abilities, and a desire to learn our indicators of success in this role.The ideal can...Show moreLast updated: 3 days ago
    • Promoted
    Technical Security Application Engineer

    Technical Security Application Engineer

    SlopeWashington, DC, United States
    Full-time
    Anduril Industries is a defense technology company with a mission to transform U.By bringing the expertise, technology, and business model of the 21st centurys most innovative companies to the defe...Show moreLast updated: 3 days ago
    • Promoted
    Security Trainer

    Security Trainer

    US Tech Solutions, Inc.Reston, VA, US
    Temporary
    Duration : 6+ Months Contract with possible extension (Hybrid) Job Description : Roles & Responsibilities : The day-to-day responsibilities of the trainer include running cohorts, teaching cybersecuri...Show moreLast updated: 30+ days ago
    • Promoted
    Security Infrastructure Support Application Developer

    Security Infrastructure Support Application Developer

    KellyMitchell GroupBethesda, MD, US
    Full-time
    Our client is seeking a Security Infrastructure Support Application Developer to join their team! This position is located in Bethesda, Maryland. Design, develop, and maintain web and backend applic...Show moreLast updated: 2 days ago
    • Promoted
    Application Security Engineer

    Application Security Engineer

    Palantir TechnologiesWashington, DC, US
    Full-time
    Palantir builds the world’s leading software for data-driven decisions and operations.By bringing the right data to the people who need it, our platforms empower our partners to develop lifes...Show moreLast updated: 5 days ago