Application Cyber Security Engineer
Application Security
AWS
Aws Ec2
Cis Benchmarks
Cloud
Cloud Infrastructure
Cloud Native Application Protection Platform
Cloud Platforms
Cloud Security Architecture
Cloud Security Posture Management
Cloud Workload Protection Platform
Cybersecurity Tools
DevSecOps
Dynamic Application Security Testing
Engineer
Identity and Access Management
Information Security
InfoSec
Iso 27001
Kubernetes Security Posture Management
Nist 800 53
Nist Cybersecurity Framework
Security
Security Automation
Security Compliance
Security Testing
Soc 2
Solution Architecture
Job Description
Based in Reston, Virginia with a hybrid work model across the DC, MD, and VA region, this Application Cyber Security Engineer role focuses on securing software and cloud environments for a healthcare payor. The position supports DevSecOps, AWS cloud security, and cloud migration initiatives, with monthly on-site presence in Reston to align with project needs.
Responsibilities
- Design and deploy application security controls to build trusted, secure systems
- Support DevSecOps practices including SAST, DAST, IAST, SCA, penetration testing, secure code reviews, and threat modeling
- Secure AWS environments across IAM, EC2, S3, Lambda, EKS, CloudTrail, Security Hub, and GuardDuty
- Manage Kubernetes and container security including Amazon EKS, pod security, RBAC, network policies, and runtime hardening
- Operate CNAPP, CSPM, KSPM, and CWPP platforms such as Wiz, CrowdStrike, or similar solutions
- Map application and cloud-native controls to frameworks including NIST CSF, NIST 800-53, ISO 27001, SOC2, CIS Benchmarks, and MITRE ATT&CK
- Implement infrastructure-as-code and policy-as-code using Terraform, Helm, CloudFormation, and Rego/OPA
- Collaborate with development teams to communicate security findings and drive practical remediation
- Advise management on cybersecurity policies, processes, and procedures
Requirements
- Strong hands-on experience in Application Security, Secure SDLC, DevSecOps, Cloud Security, and Vulnerability Management
- Deep knowledge of OWASP Top 10, API Security Top 10, and secure coding practices
- Hands-on experience with CNAPP, CSPM, KSPM, CWPP platforms (Wiz, CrowdStrike, or similar)
- Hands-on AWS cloud security experience across core services
- Deep knowledge of Kubernetes and container security including Amazon EKS
- Strong CI/CD and DevSecOps pipeline security experience
- Experience with IaC and policy-as-code tools — Terraform, Helm, CloudFormation, Rego/OPA
- Strong written and verbal communication skills for both technical and non-technical audiences
- One or more certifications required: CISSP, CISM, CEH, or CISA
Technologies
- AWS IAM, AWS EC2, AWS S3, AWS Lambda, AWS EKS, AWS CloudTrail, AWS Security Hub, AWS GuardDuty
- Kubernetes, Amazon EKS
- CNAPP, CSPM, KSPM, CWPP
- Wiz, CrowdStrike
- Terraform, Helm, CloudFormation, Rego, OPA
- NIST CSF, NIST 800-53, ISO 27001, SOC2, CIS Benchmarks, MITRE ATT&CK
- SAST, DAST, IAST, SCA, RBAC
Project Description
Our client, a leading healthcare payor in Reston, VA, seeks a software-focused Application Cyber Security Engineer to support DevSecOps, AWS Cloud Security, and cloud migration initiatives. This role is largely remote with monthly on-site visits to Reston, VA. Candidates must reside in the DC, MD, or VA area, as travel expenses will not be reimbursed. The interview process consists of two rounds, with a mandatory face-to-face final round in Reston, VA.
Nice-to-have Skills
- AWS Certified Security Specialty certification
- Experience in healthcare or similarly regulated industries
- Background in cloud migration security initiatives
Company Overview
Glint Tech Solutions is a women-owned global staffing and IT recruiting firm connecting top technical talent with leading enterprise clients across the United States.
Similar Jobs
