Web Developer Security Engineer

DMI is a leading provider of digital services and technology solutions, headquartered in Tysons Corner, VA. With a focus on end-to-end managed IT services, including managed mobility, cloud, cybersecurity, network operations, and application development, DMI supports public sector agencies and commercial enterprises around the globe. Recognized as a Top Workplace, DMI is committed to delivering secure, efcient, and cost-effective solutions that drive measurable results. Learn more at www.dminc.com

DMI is seeking a Web Developer Security Engineer to embed security throughout the software development lifecycle for a federal agency client. In this role, you will identify and remediate vulnerabilities in web applications and APIs, integrate security controls into application architectures, and support compliance with federal cybersecurity frameworks - functioning at the intersection of development and security.

Duties and Responsibilities:

Identify, analyze, and remediate critical vulnerabilities, logic flaws, insecure dependencies, and misconfigurations in web applications and APIs
• Drive end-to-end vulnerability lifecycle management, including threat modeling, security assessments, and technical validation of remediation
• Integrate security controls into application architectures and APIs; advise on secure design patterns and data protection mechanisms
• Review and analyze web server and application logs to detect anomalies and indicators of compromise; implement threat intelligence automation
• Deploy, tune, and maintain Web Application Firewalls (WAF) tailored to custom-developed applications and traffic patterns
• Configure and manage File Integrity Monitoring (FIM) solutions to detect and alert on unauthorized changes to web content directories
• Implement DevSecOps principles throughout the CI/CD pipeline; develop security metrics and compliance reporting against established baselines
• Ensure web applications and cloud infrastructure comply with NIST SP 800-53, FISMA, and FedRAMP requirements; participate in audits and risk assessments
• Provide Tier II support for security operations and recommend ongoing security enhancements

Education and Years of Experience:

• Bachelor's degree or higher in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field
• Minimum 3 years of experience in Web Application Security, Application Security Engineering (AppSec), or SSDLC
• Proficiency in .NET (C# MVC, WCF), HTML5, CSS3, JavaScript, REST APIs, and SQL
• Strong understanding of OWASP Top 10 and secure coding standards
• Experience deploying and managing WAF solutions for custom-developed web applications
• Experience configuring FIM solutions for web content and application directories
• Familiarity with security testing tools, including Wireshark, SIEM, IDS/IPS, NDR, and EDR
• Ability to leverage AI-assisted development tools (e.g., GitHub Copilot, OpenAI API) for security automation and compliance auditing
• Experience implementing DevSecOps principles, including security gate integration in CI/CD pipelines
• Active security certifications across AppSec, offensive security, and foundational security domains, maintained for a minimum of 5 years

Required Skills & Certifications:

• In-depth experience with federal cybersecurity frameworks, including NIST SP 800-53, FISMA, and FedRAMP authorization processes
• Proven background in threat modeling, risk assessment, and security architecture design
• Advanced experience with CI/CD pipeline security gate automation
• Cloud security experience with AWS and container security (Docker, Kubernetes)

Clearance Requirements: Must possess or be eligible to obtain and complete a government security screening and/or a Secret security clearance.

Citizenship Status Required: Must be a U.S. Citizen

Physical Requirements: None required for this position.

Location: Remote, US

DMI is a diverse, prosperous, and rewarding place to work. Our culture is shaped by five core values that guide how we work, grow, and succeed together:

• Do What's Right - We lead with honesty and integrity.
• Own the Outcome - We take responsibility and deliver.
• Deliver for Our Customers - We are relentless about delivering value.
• Think Bold, Act Smart - We innovate with purpose.
• Win Together - We collaborate and celebrate our success.

These values aren't just ideals-they show up in how we support every part of your well-being:

• Convenience/Concierge - Virtual health visits, commuter perks, pet insurance, and entertainment discounts that make life easier.
• Development - Annual performance reviews, tuition assistance, and internal career growth opportunities to help you thrive.
• Financial - Generous 401(k) matches, life and disability insurance, and financial wellness tools to support your future.
• Recognition - Annual awards, service anniversaries, referral bonuses, and peer-to-peer shoutouts that spotlight your achievements.
• Wellness - Healthcare coverage, wellness programs, flu shots, and biometric screenings to support your health.

DMI values employees for their talents and contributions, and we take pride in helping our customers achieve their goals. Because when we live our values, we all win together.

***************** No Agencies Please *****************

Applicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information. US citizenship may be required for some positions.