Security Engineer - Arlington, Virginia
9 hours ago
Job description
Description
gTANGIBLE Corporation (gTC), , is a C corporation and a registered Government contractor that provides services and solutions in:
- National Security Programs
- Professional, Administrative, and Management Support
- Mission and Warfighter Support
We are a Service-Disabled Veteran-Owned Small Business (SDVOSB) and the founder has years of successful experience in the Government contracting arena. Our leadership team is an exceptional group of Government contracting professionals. gTANGIBLE is in the process of identifying candidates for the following position.
Requisition Type: Full Time
Position Status: Contingent
Position Title: Security Engineer (Web Application)
Location: Arlington, VA
Security Clearance: Secret
Duties and Responsibilities
The Security Engineer (Web Application) supports this Transportation Security Administration Information Technology (TSA IT) Task Order (TO) by web application testing that require testing both via automated tools and with manual testing techniques. Application testing will require authenticated and non-authenticated testing to ensure full evaluation of the cybersecurity controls for the applications. Off hours testing conducted on a as needed basis. Periodic travel required. Duties include the following:
- Identifies flaws in business logic, programmatic vulnerabilities and weaknesses, and ensures appropriate and consistent risk levels are assigned to such findings.
- Identifies policy gaps, deficiencies and recommends updates, additions, and modification to TSA security policy.
- Conducts security testing of web applications, web services, end points, (and other web-related assets) using both Information Assurance & Cybersecurity Division (IAD)-provided automated testing tools and manual testing techniques.
- Analyzes and validates test results and removes false positives and submits to stakeholders.
- Participates with stakeholders regarding findings meetings and responses.
- Provides Subject Matter Expertise on emerging web and mobile technologies, languages, and frameworks. In addition, also provide and support on external security audits conducted of the TSA.
Knowledge and Qualifications
- At least ten (10) years of technical IT security experience.
- At least five (5) years of experience performing web application security testing, software development and/or testing.
- At least three (3) years of experience performing web application security testing using manual techniques and vulnerability testing tools and/or code review tools for Federal IT systems.
- Ability to work independently/minimal oversight.
- Experience with manual web security testing techniques.
- Strong understanding of NIST SP and DISA STIGS.
- Required Certifications: CISSP, CEH, GWAPT or other relevant certifications.
- Experience with WebInspect, AppScan, BurpSuite, SmartBear SoapUI, Nessus Professional, HP Fortify, Apple Developers Toolkit, Eclipse, and Wireshark.
- Strong organizational, analytical, and technical writing skills to be able to document findings in reports.
gTANGIBLE Corporation is an equal opportunity employer and does not discriminate against any employee or applicant because of race, age, sex, color, physical or mental disability, religion, sexual orientation, marital status, national origin, or political affiliation.
Similar jobs
The Security Engineer will provide expertise in designing, implementing, · and maintaining security controls across DHS CISA's IT · and cloud environments. · This role supports vulnerability management, · Zero Trust initiatives, · and secure cloud adoption. · ...
1 month ago
The U.S. Cybersecurity and Infrastructure Security (CISA) mission is to lead the national effort to protect and enhance the resilience of the nation's physical and cyber infrastructure. · ...
1 month ago
The Security Engineer role will focus on providing Zscaler Engineering support and will be responsible for implementing the ZScaler solutions to manage connections between CISA users and cloud environments. · The Zscaler Engineer is responsible for the engineering, design, test, ...
1 month ago
+Zetier seeks experienced IT Security Engineer to support manage and secure our rapidly expanding infrastructure. · +Practical experience (4+ years) with IT admin (e.g. Linux Ubiquiti) · Familiarity with modern orchestration tools (e.g. Docker Kubernetes) · +Responsibilities,vali ...
1 month ago
Zetier seeks experienced IT Security Engineer to support, manage and secure our rapidly expanding infrastructure. · ...
1 month ago
The U.S. Cybersecurity and Infrastructure Security (CISA) mission is to lead the national effort to protect and enhance the resilience of the nation's physical and cyber infrastructure. · CISA's information technology (IT) landscape has historically produced networks and systems ...
1 month ago
Tetrad Digital Integrity (TDI) is a leading-edge cybersecurity firm with a mission to safeguard and protect our customers from increasing threats and vulnerabilities in this digital age. · The Security Engineer will need to be a self-starter with excellent analytical and problem- ...
1 week ago
Tetrad Digital Integrity (TDI) is seeking a Security Engineer for a customer on a highly visible and strategic Cybersecurity Task Order. · The Security Engineer will be responsible for ensuring that systems are functional, secure and scalable. · ...
1 month ago
Tetrad Digital Integrity (TDI) is a leading-edge cybersecurity firm with a mission to safeguard and protect our customers from increasing threats and vulnerabilities in this digital age. TDI has an immediate need for a Security Engineer for a customer on a highly visible and stra ...
1 month ago
Security Engineer (Hybrid) · Location: Arlington, VA (Hybrid) · Clearance: Must be a U.S. citizen and able to obtain and maintain DHS suitability clearance, as required by federal contract. · Summary: · The Security Engineer will provide expertise in designing, implementing, and ...
9 hours ago
Tetrad Digital Integrity (TDI) is a leading-edge cybersecurity firm with a mission to safeguard and protect our customers from increasing threats and vulnerabilities in this digital age. · The Security Engineer will work with internal team members to ensure that systems are funct ...
1 month ago
We are seeking an IT Security Engineer to join our team. As the nation's largest deposit allocation service provider and the inventor of reciprocal deposits, IntraFi has spent over two decades creating dynamic solutions that help financial institutions grow, manage liquidity, and ...
1 week ago
As the IT Security Engineer, you will work collaboratively with the IT Security team that is responsible for maintaining the security and integrity of data. · ...
1 week ago
Tetrad Digital Integrity (TDI) is a leading-edge cybersecurity firm with a mission to safeguard and protect our customers from increasing threats and vulnerabilities in this digital age. · ...
1 month ago
+As the IT Security Engineer, you will work collaboratively with the IT Security team that is responsible for maintaining the security and integrity of data. · + · Enhancing security posture by providing actionable advice and guidance to protect assets. · Mitigating risks by coll ...
1 month ago
The U.S. Cybersecurity and Infrastructure Security (CISA) mission is to lead the national effort to protect and enhance the resilience of the nation's physical and cyber infrastructure. CISA includes the CISA Mission Enabling Offices (MEOs) and six Divisions: the Cybersecurity Di ...
1 week ago
We empower banks to provide financial access to small businesses and consumers across the country. · Enhancing security posture by providing actionable advice and guidance to protect assets. · Reducing vulnerabilities through comprehensive security assessments, risk analysis, and ...
1 week ago
· Description · gTANGIBLE Corporation (gTC), , is a C corporation and a registered Government contractor that provides services and solutions in: · National Security Programs · Professional, Administrative, and Management Support · Mission and Warfighter Support · We are a Servi ...
9 hours ago
The Security Engineer role will focus on providing Zscaler Engineering support and will be responsible for implementing the ZScaler solutions to manage connections between CISA users and cloud environments. · ...
1 month ago
· Description · gTANGIBLE Corporation (gTC), , is a C corporation and a registered Government contractor that provides services and solutions in: · National Security Programs · Professional, Administrative, and Management Support · Mission and Warfighter Support · We are a Servi ...
9 hours ago