Web Developer, Security Engineer

DMI (Digital Management, LLC)

Web Developer Security Engineer embedding security throughout the software development lifecycle for a federal agency client. Identify and remediate vulnerabilities in web applications and APIs, integrating security controls into application architectures.

Posted 7/6/2026full-timeRemote • 🇺🇸 United StatesMid-LevelSenior💰 $77,800 - $85,341 per yearWebsite

Tech Stack

Tools & technologies

CloudCyber SecurityFirewallsJavaScript.NETSQL

About the role

Key responsibilities & impact

Identify, analyze, and remediate critical vulnerabilities, logic flaws, insecure dependencies, and misconfigurations in web applications and APIs
Drive end-to-end vulnerability lifecycle management, including threat modeling, security assessments, and technical validation of remediation
Integrate security controls into application architectures and APIs; advise on secure design patterns and data protection mechanisms
Review and analyze web server and application logs to detect anomalies and indicators of compromise; implement threat intelligence automation
Deploy, tune, and maintain Web Application Firewalls (WAF) tailored to custom-developed applications and traffic patterns
Configure and manage File Integrity Monitoring (FIM) solutions to detect and alert on unauthorized changes to web content directories
Implement DevSecOps principles throughout the CI/CD pipeline; develop security metrics and compliance reporting against established baselines
Ensure web applications and cloud infrastructure comply with NIST SP 800-53, FISMA, and FedRAMP requirements; participate in audits and risk assessments
Provide Tier II support for security operations and recommend ongoing security enhancements

Requirements

What you’ll need

Bachelor's degree or higher in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field
Minimum 3 years of experience in Web Application Security, Application Security Engineering (AppSec), or SSDLC
Proficiency in .NET (C# MVC, WCF), HTML5, CSS3, JavaScript, REST APIs, and SQL
Strong understanding of OWASP Top 10 and secure coding standards
Experience deploying and managing WAF solutions for custom-developed web applications
Experience configuring FIM solutions for web content and application directories
Familiarity with security testing tools, including Wireshark, SIEM, IDS/IPS, NDR, and EDR
Ability to leverage AI-assisted development tools (e.g., GitHub Copilot, OpenAI API) for security automation and compliance auditing
Experience implementing DevSecOps principles, including security gate integration in CI/CD pipelines
Active security certifications across AppSec, offensive security, and foundational security domains, maintained for a minimum of 5 years

Benefits

Comp & perks

Virtual health visits
Commuter perks
Pet insurance
Entertainment discounts
Annual performance reviews
Tuition assistance
Internal career growth opportunities
Generous 401(k) matches
Life and disability insurance
Financial wellness tools
Annual awards
Service anniversaries
Referral bonuses
Peer-to-peer shoutouts
Healthcare coverage
Wellness programs
Flu shots
Biometric screenings

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

.NET (C# MVC, WCF)HTML5CSS3JavaScriptREST APIsSQLOWASP Top 10Security Testing ToolsFIM SolutionsThreat Modeling

Certifications

Active Security CertificationsAppSec CertificationsOffensive Security Certifications