Web Developer Security Engineer

Web Developer Security Engineer

Clearance Requirement

Public Trust (Tier 2)

Location

Remote/Hybrid (as approved by customer)

Position Overview: Nationwide IT Services (NIS) is seeking a Web Developer Security Engineer to support application security initiatives across web applications, APIs, and the software development lifecycle (SDLC). The selected candidate will be responsible for secure application design, vulnerability management, DevSecOps integration, security monitoring, WAF administration, File Integrity Monitoring (FIM), and Tier II security operations support.

Required Experience:* Minimum 3 years of experience in Application Security and Secure Software Development Lifecycle (SSDLC). * Strong knowledge of web application security principles and OWASP Top 10 vulnerabilities. * Experience managing the full vulnerability lifecycle, including threat modeling, security assessments, remediation, and validation. * Experience with secure application design, architecture reviews, data protection, and secure communications. * Hands-on experience with Web Application Firewall (WAF) deployment, configuration, and tuning. * Experience with File Integrity Monitoring (FIM), log analysis, Indicators of Compromise (IOC) detection, and threat intelligence automation. * Experience supporting Tier II Security Operations. * Experience implementing DevSecOps practices and automated security controls within CI/CD pipelines.

Technical Skills:* .NET Technologies: C#, ASP.NET MVC, WCF * Front-End: HTML5, CSS3, JavaScript, React, TypeScript * APIs & Databases: REST APIs, SQL * Programming/Scripting: Python, Node.js, Java * AI-Assisted Development Tools (e.g., GitHub Copilot) * Security Tools: SIEM, IDS/IPS, NDR, EDR * Cloud & Container Security: AWS, Docker, Kubernetes

Compliance & Governance:* Experience supporting environments governed by NIST SP 800-53, FISMA, and FedRAMP. * Experience participating in audits, security assessments,...