Web Application Security Engineer (Appsec / Devsecops)

Essnova Solutions, Inc.Washington, DC

Apply with Sonara

Automate your job search with Sonara.

Submit 10x as many applications with less effort than one manual application.¹

Reclaim your time by letting our AI handle the grunt work of job searching.

We continuously scan millions of openings to find your top matches.

Overview

Schedule

Full-time

Career level

Senior-level

Remote

Hybrid remote

Benefits

Career Development

Job Description

Location: Washington, DC Metropolitan Area (Hybrid)

Employment Type: Full-Time

Clearance: Public Trust (Tier 2) or ability to obtain*

About Essnova Solutions

Essnova Solutions is a growing technology consulting firm delivering innovative IT, cloud, cybersecurity, engineering, and digital transformation solutions to Federal Government clients. We are committed to technical excellence, collaboration, and providing our employees with opportunities to solve complex mission challenges.

Position Summary

Essnova Solutions is seeking an experienced Web Application Security Engineer to support a federal customer by integrating security throughout the software development lifecycle (SDLC) and protecting enterprise web applications and APIs from evolving cyber threats. The ideal candidate has experience with application security, secure software development, vulnerability management, DevSecOps, and federal cybersecurity frameworks.

Key Responsibilities

Embed security throughout the Software Development Lifecycle (SDLC).
Perform web application vulnerability assessments, penetration support, and threat modeling activities.
Identify, prioritize, and remediate application security vulnerabilities.
Implement secure coding standards aligned with OWASP Top 10 and industry best practices.
Configure and maintain Web Application Firewalls (WAF) and application security controls.
Integrate application security tools into CI/CD pipelines and DevSecOps workflows.
Monitor application logs and investigate security events affecting web applications and APIs.
Collaborate with software developers, DevOps engineers, and cybersecurity teams to improve application security posture.
Support compliance with NIST, FISMA, FedRAMP, and other federal cybersecurity standards.
Develop security documentation, technical recommendations, and remediation guidance.

Required Qualifications

Experience in Application Security (AppSec), Web Application Security, or Product Security.
Strong knowledge of secure software development practices and Secure SDLC.
Experience performing vulnerability assessments, threat modeling, and application security testing.
Knowledge of OWASP Top 10, common web application vulnerabilities, and remediation techniques.
Experience implementing or supporting Web Application Firewalls (WAF).
Experience integrating security into CI/CD pipelines and DevSecOps environments.
Familiarity with federal cybersecurity frameworks including NIST and FedRAMP.
Excellent analytical, troubleshooting, and communication skills.

Preferred Qualifications

Experience with SAST, DAST, Software Composition Analysis (SCA), or similar application security tools.
Experience with secure code reviews and developer security training.
Experience supporting cloud-native applications within AWS and/or Microsoft Azure.
Experience supporting federal government or highly regulated environments.
Relevant security certifications such as:

CSSLP
OSCP
OSWE
GWEB
CASE
Security+
GSEC

Clearance

Public Trust (Tier 2) clearance or the ability to obtain and maintain one.*

Why Join Essnova?

At Essnova Solutions, you'll join a collaborative team supporting high-impact federal technology initiatives. We invest in our employees by providing opportunities to work with modern cloud technologies, cybersecurity best practices, and mission-critical systems that make a real difference.

Automate your job search with Sonara.

Submit 10x as many applications with less effort than one manual application.

Apply with Sonara Apply manually

FAQs About Web Application Security Engineer (Appsec / Devsecops) Jobs at Essnova Solutions, Inc.

What is the work location for this position at Essnova Solutions, Inc.?

This job at Essnova Solutions, Inc. is located in Washington, DC, according to the details provided by the employer. Some roles may also include multiple work locations depending on the requirement.

What pay range can candidates expect for this role at Essnova Solutions, Inc.?

Employer has not shared pay details for this role.

What employment applies to this position at Essnova Solutions, Inc.?

Essnova Solutions, Inc. lists this role as a Full-time position.

What experience level is required for this role at Essnova Solutions, Inc.?

Essnova Solutions, Inc. is looking for a candidate with "Senior-level" experience level.

What benefits are offered by Essnova Solutions, Inc. for this role?

Essnova Solutions, Inc. offers Career Development for this position. Actual benefits may vary depending on the employer's policies and employment terms.

What is the process to apply for this position at Essnova Solutions, Inc.?

You can apply for this role at Essnova Solutions, Inc. either through Sonara's automated application system, which helps you submit applications 10X faster with minimal effort, or by applying manually using the direct link on the job page.