Senior Security Engineer 5503
tier4 groupHerndon (VA)
Senior Security Engineer 5503
Posted today
tier4 groupHerndon (VA)
SENIORITY
Lead
About the role
The Senior Security Engineer designs, implements, operates, and continuously improves the security technologies and controls across applications and supporting platforms. Primary focus is Application Security -embedding security into the SDLC and CI/CD pipelines, strengthening web/API protections, and enabling proactive detection, while contributing broadly to Security Engineering capabilities (identity, cloud/onprem security platforms, logging/telemetry, and automation). The role partners closely with development, DevOps, and operations teams to build secure-by-default applications and services. All candidates should make sure to read the following job description and information carefully before applying.
PRINCIPAL RESPONSIBILITIES: Develop and maintain software application security policies and procedures
Implement software application security controls Partner with DevOps in developing a secure CI/CD pipeline Design and operate web application firewall (WAF) and API protections; tune rules, reduce false positives, and automate policy updates Identify application security vulnerabilities and issues, perform risk assessments and provide mitigations Develop security monitoring for application stack Conduct technical investigations of application security incidents Interface with senior stakeholders across the IT leadership team to proactively interpret risks and priorities. Support the diversity and inclusion strategy by following policies and procedures that ensure opportunities for employees and diverse business partners. Assist with other job duties as assigned.
REQUIREMENTS:
A minimum 6 to 8 years of experience in Application Security (designing, implementing, and operating security controls in enterprise application environments).Hands-on experience with web application security, including OWASP Top 10 vulnerabilities Hands-on experience with WAF/API security (policy design, rule tuning, automation), container security (runtime hardening, image scanning, vulnerability risk assessments) Hands-on experience with conducting web application security scans, vulnerability assessments and/or penetration testing Experience in investigating problems and processes within established methodologies and best practices. Experience working with Authentication and Authorization services like OAuth and OpenIDExperience in operating on-prem or cloud-based security platforms Ability to troubleshoot security and network-related issues and communicate technical findings effectively Ability to listen and integrate ideas from diverse groups of individuals, build and maintain respectful relationships, collaborate with others, and resolve conflicts constructively. Bachelor's Degree in Information Security or Computer Science or Computer/Electrical Engineering, and/or equivalent field experience. xxoysbn Proof of eligibility to work in the United States.
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.