Application Cyber Security Engineer

Glint Tech Solutions LLC • Reston, VA

40d • Hybrid

About The Position

Our client, a leading healthcare payor in Reston, VA, is seeking a software-focused Application Cyber Security Engineer to support DevSecOps, AWS Cloud Security, and cloud migration initiatives. This is primarily a remote role with required monthly onsite visits to Reston, VA. Candidates must reside in the DC, MD, or VA area — travel expenses will not be reimbursed. The interview process includes 2 rounds with a mandatory F2F final round in Reston, VA.

Requirements

• Strong hands-on experience in Application Security, Secure SDLC, DevSecOps, Cloud Security, and Vulnerability Management
• Deep knowledge of OWASP Top 10, API Security Top 10, and secure coding practices
• Hands-on experience with CNAPP, CSPM, KSPM, CWPP platforms (Wiz, CrowdStrike, or similar)
• Hands-on AWS cloud security experience across core services
• Deep knowledge of Kubernetes and container security including Amazon EKS
• Strong CI/CD and DevSecOps pipeline security experience
• Experience with IaC and policy-as-code tools — Terraform, Helm, CloudFormation, Rego/OPA
• Strong written and verbal communication skills for both technical and non-technical audiences
• One or more certifications required: CISSP, CISM, CEH, or CISA

Nice To Haves

• AWS Certified Security Specialty certification
• Experience in healthcare or similarly regulated industries
• Background in cloud migration security initiatives

Responsibilities

• Develop and implement application security solutions; architect and engineer trusted systems into secure systems
• Support DevSecOps practices including SAST, DAST, IAST, SCA, penetration testing, secure code review, and threat modeling
• Secure AWS environments across IAM, EC2, S3, Lambda, EKS, CloudTrail, Security Hub, and GuardDuty
• Manage Kubernetes and container security including Amazon EKS, pod security, RBAC, network policies, and runtime hardening
• Operate CNAPP, CSPM, KSPM, and CWPP platforms such as Wiz, CrowdStrike, or similar solutions
• Map application and cloud-native controls to frameworks including NIST CSF, NIST 800-53, ISO 27001, SOC2, CIS Benchmarks, and MITRE ATT&CK
• Implement infrastructure-as-code and policy-as-code using Terraform, Helm, CloudFormation, and Rego/OPA
• Collaborate with development teams to communicate security findings and drive practical remediation
• Advise management on cybersecurity policies, processes, and procedures

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed