Logo for Applied Intellect, LLC

Web Developer Security Engineer

Applied Intellect, LLC

Role overview

Qualifications

  • Bachelor’s degree in computer science, Cybersecurity, Information Systems, Engineering, or a related field
  • Minimum of 3 years of experience in Web Application Security, Application Security Engineering, or secure software development lifecycle
  • Proficiency in modern web technologies such as .NET, HTML5, CSS3, JavaScript, REST APIs, and SQL
  • At least one relevant certification such as Certified Secure Software Lifecycle Professional (CSSLP) or equivalent

Responsibilities

  • Identify, analyze, and neutralize critical vulnerabilities and logic flaws
  • Drive the end-to-end vulnerability lifecycle integrating proactive threat modeling and advanced security assessments
  • Obtain, review, and analyze web server logs to detect anomalies and implement automation scripts for threat intelligence integration
  • Ensure compliance of all web applications and cloud infrastructures with Federal cybersecurity frameworks

About the company

Applied Intellect, LLC logo

Applied Intellect, LLC

Applied Intellect, LLC (AI) delivers life-cycle management solutions for infrastructure, engineering, environmental, energy/sustainability, operations & maintenance, capital improvements, cyber security, and national intelligence programs. AI provides strategic support, program and project management services to organizations in developing and implementing a process-based framework for the management of their mission and business objectives. AI is a SBA 8a certified Small Business. We have a proven track record of providing high-quality IT, environmental, and program management solutions on-time and within budget using highly qualified professional staff. Our Program Managers, Environmental Scientists, Enterprise Data Architects, and Software Engineers have extensive experience servicing a variety of Defense and Civilian agencies. We understand one size does not fit all when it comes to business program requirements; we develop custom solutions for our customer’s unique program needs. Certifications: - SBA Certified 8(a) Small Disadvantaged Business (SDB) - Pennsylvania DBE, MBE Certified - Colorado DBE, MBE, SBE Certified - DCAA Audited/Compliant - ISO 9001: 2015 Certified - CMMI Level 3 Contract Vehicles: - GSA IT Schedule 70 - GSA Professional Services Schedule - GSA 8(a) STARS III - CIO-SP3 Small Business and 8(a) - OASIS Small Business Pool 1 - Seaport NxG

Company details

Company size51 - 200

Links

Website LinkedIn See all jobs

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

OVERVIEW


Clearance: Public Trust Tier 2 or higher preferred

Applied Intellect is seeking a Web Developer Security Engineer to support federal contracts, by playing a pivotal role in protecting mission-critical web applications, APIs and sensitive data. The objectives are to embed robust security principles throughout the software development lifecycle (SDLC) to build security as a proactive, foundational pillar.

Key Responsibilities

The Key Responsibilities include, but is not limited to, the following activities:

Web Application Security

  • Identify, analyze, and neutralize critical vulnerabilities, logic flaws, insecure dependencies, and misconfigurations
  • Drive the end-to-end vulnerability lifecycle - integrating proactive threat modeling and advanced security assessments, ensuring remediation integrity through rigorous technical validation
  • Support integration of security controls into application architectures, APIs, and supporting services, advising on secure design patterns; data protection mechanisms; and secure communication protocols to ensure applications are secure by design and resilient to evolving threats

Monitoring, Logging, Incident Response and Automation

  • Obtain, review, and analyze web server and application logs to detect anomalies and indicators of compromise
  • Implement automation scripts for threat intelligence integration to optimize alert accuracy and actively support the end-to-end response to web application security events.
  • Maintain documentation of findings, remediation steps, and security controls

Compliance & Governance

  • Ensure all web applications and cloud infrastructures comply with Federal cybersecurity frameworks, including NIST SP 800‑53, FISMA, and FedRAMP (as applicable)
  • Participate in audits, risk assessments, and security authorization processes

Required Skills/Knowledge/Expertise

  • Extensive hands-on experience in secure software development, DevSecOps automation, and vulnerability remediation. 
  • Proficiency in logs analysis, file integrity monitoring (FIM), and managing web application firewalls (WAF) to defend against emerging threats. 
  • Minimum of 3 years of experience in Web Application Security, Application Security Engineering (AppSec) or secure software development life cycle (SSDLC) 
  • Proven developing with modern web technologies and frameworks not limited to .NET (C# MVC, WCF), HTML5, CSS3, JavaScript, REST APIs, and SQL 
  • Ability to leverage AI-assisted development tools (e.g., GitHub Copilot, OpenAI API/Codex) and scripting languages (Python, JavaScript/Node.js, Java, React.js, TypeScript) to automate security monitoring and compliance audits 
  • Strong understanding of Open Worldwide Application Security Project (OWASP) Top 10, secure coding standards, and proactive mitigation of common web vulnerabilities. 
  • Experience deploying, tuning, and maintaining Web Application Firewalls (WAFs) solutions tailored to custom-developed applications and traffic patterns. 
  • Strong track record in configuring and managing File Integrity Monitoring (FIM) solutions for web content directories, to detect and alert on unauthorized change. 
  • Familiar with security testing tools such as Wireshark, SIEM, IDS/IPS, NDR, or EDR 
  • Evaluates, recommends, and implements security controls for mobile device solutions and mobile-web interface. 
  • Ability to perform complex risk assessments, analyze cyber threats, and provide remediation guidance for core systems and their dependencies 
  • Proven ability to implement DevSecOps principles, seamlessly integrating security controls throughout the CI/CD pipeline 
  • Experience developing security metrics, managing compliance reporting, and auditing systems against established security baselines 
  • Collaborate effectively across multidisciplinary teams, and work independently as well as in a team 
  • Experience providing Tier II support for security operations and recommending continue security enhancements for existing infrastructure. 

Desired Skills

  • In-depth experience at Federal cybersecurity frameworks (NIST SP 800‑53, FISMA, FedRAMP) authorization process
  • Proven background in threat modeling, risk assessment, and designing resilient security architecture
  • Advanced experience implementing secure DevOps/DevSecOps practices, specifically focus on CI/CD pipeline and automating security gates
  • Knowledge of cloud security AWS and container security (Docker, Kubernetes)

Required Education & Credentials 

  • Bachelor’s degree (or higher) in computer science, Cybersecurity, Information Systems, Engineering, or a related field. 

The candidate also must have at least one of the following current credentials/certification for each category: 

  • Specialized AppSec: 
    • Certified Secure Software Lifecyle Professional (CSSLP) 
    • GIAC Certified Web Application Defender (GWEB) 
    • EC-Council Certified Application Security Engineer (CASE) 
  • Offensive Security: 
    • OffSec Web Expert (OSWE) 
    • Offensive Security Certified Professional (OSCP) 
  • Foundational Security: 
    • Security+ 
    • GSEC 

These (or their equivalent prior certifications) should have been maintained for a minimum of 5 years. Expired certifications or certifications never used professionally will not be considered.

 PHYSICAL DEMANDS 

  • Use of manual dexterity, tactile, visual, and audio acuity;
  • Use of repetitive motion, prolonged periods of sitting and standing, and sustained visual and mental applications and demands;
  • Occasional lifting (up to 25 pounds), bending, pulling, and carrying; and
  • Quantitative/mathematical ability (addition, subtraction, multiplication, division, standard measurements).


Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

EQUAL EMPLOYMENT OPPORTUNITY

Applied Intellect is an equal opportunity employer. 

The above-listed duties and responsibilities are essential job functions. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. All job duties indicated are not to be an exhaustive statement, and other job-related duties may be assigned as required by the supervisor(s).

Apply once. Then go straight to the hiring manager.

After you apply, unlock the direct contact details of the people who actually make the call. A quick follow-up makes you 5x more likely to land an interview.

MR

Marcus Rivera

Chief Revenue Officer

m.rivera@company.com
linkedin.com/in/marcusrivera
Unlocked after you apply
·

Security Engineer Related jobs

Virginia (USA)Security Engineer

Other jobs at Applied Intellect, LLC

Premium

Reach out to the hiring manager directly.

Gain access to the contact details of the hiring managers who actually decide, and reach out to network with them directly. That, plus more when you upgrade:

  • Full match report with fit score and gaps
  • Career diagnostics on how recruiters read you
  • Curated company matches and warm intros
  • 48h early access to new roles

Cancel anytime.