Amazon Web Services (AWS), Analysis Skills, Application Programming Interface (API), Applications Security, Cloud Applications, Cloud Computing, Code Reviews, Communication Skills, CompTIA Security+, Computer Security, Consulting, Continuous Deployment/Delivery, Continuous Integration, Establish Priorities, FISMA - Federal Information Security Management Act, Federal Government, Firewalls, GSEC - GIAC Security Essentials Certification, Identify Issues, Internet Application, Internet Security, Microsoft Windows Azure, Secure Coding, Security Attacks, Security Software, Software Administration, Software Development Lifecycle (SDLC), Software Engineering, Software Testing, Team Player, Technical Delivery, Technical Writing, Threat Modeling, U.S. National Institute of Standards and Technology (NIST), Web Programming
Washington, District of Columbia
Location: Washington, DC Metropolitan Area (Hybrid)
Employment Type: Full-Time
Clearance: Public Trust (Tier 2) or ability to obtain*
About Essnova Solutions
Essnova Solutions is a growing technology consulting firm delivering innovative IT, cloud, cybersecurity, engineering, and digital transformation solutions to Federal Government clients. We are committed to technical excellence, collaboration, and providing our employees with opportunities to solve complex mission challenges.
Position Summary
Essnova Solutions is seeking an experienced Web Application Security Engineer to support a federal customer by integrating security throughout the software development lifecycle (SDLC) and protecting enterprise web applications and APIs from evolving cyber threats. The ideal candidate has experience with application security, secure software development, vulnerability management, DevSecOps, and federal cybersecurity frameworks.
Key Responsibilities
- Embed security throughout the Software Development Lifecycle (SDLC).
- Perform web application vulnerability assessments, penetration support, and threat modeling activities.
- Identify, prioritize, and remediate application security vulnerabilities.
- Implement secure coding standards aligned with OWASP Top 10 and industry best practices.
- Configure and maintain Web Application Firewalls (WAF) and application security controls.
- Integrate application security tools into CI/CD pipelines and DevSecOps workflows.
- Monitor application logs and investigate security events affecting web applications and APIs.
- Collaborate with software developers, DevOps engineers, and cybersecurity teams to improve application security posture.
- Support compliance with NIST, FISMA, FedRAMP, and other federal cybersecurity standards.
- Develop security documentation, technical recommendations, and remediation guidance.
Required Qualifications
- Experience in Application Security (AppSec), Web Application Security, or Product Security.
- Strong knowledge of secure software development practices and Secure SDLC.
- Experience performing vulnerability assessments, threat modeling, and application security testing.
- Knowledge of OWASP Top 10, common web application vulnerabilities, and remediation techniques.
- Experience implementing or supporting Web Application Firewalls (WAF).
- Experience integrating security into CI/CD pipelines and DevSecOps environments.
- Familiarity with federal cybersecurity frameworks including NIST and FedRAMP.
- Excellent analytical, troubleshooting, and communication skills.
Preferred Qualifications
- Experience with SAST, DAST, Software Composition Analysis (SCA), or similar application security tools.
- Experience with secure code reviews and developer security training.
- Experience supporting cloud-native applications within AWS and/or Microsoft Azure.
- Experience supporting federal government or highly regulated environments.
- Relevant security certifications such as:
- CSSLP
- OSCP
- OSWE
- GWEB
- CASE
- Security+
- GSEC
Clearance
- Public Trust (Tier 2) clearance or the ability to obtain and maintain one.*
Why Join Essnova?
At Essnova Solutions, you'll join a collaborative team supporting high-impact federal technology initiatives. We invest in our employees by providing opportunities to work with modern cloud technologies, cybersecurity best practices, and mission-critical systems that make a real difference.
E
Essnova Solutions
Founded in 2005, Essnova has become a highly regarded leader in the Geospatial Technology and Consulting field. Essnova provides services for over 40 client organizations, spanning 10 countries around the globe. Our clients cover a broad range of private and public sector enterprises.
Essnova focuses on providing customized solutions. We are GIS/Geospatial experts with specific experience in utilities, municipalities and government agencies. Essnova believes in a true partnership approach in which we collaborate with our partners to deliver valuable solutions. Furthermore, we also provide technology solutions for Healthcare, Financial and other sectors as well.