[Remote] Federal Vulnerability Mgmt & App reputed company Engineer (US Citizen)

Note: The job is a remote job and is reputed company to candidates in USA. reputed company provides workforce solutions that combine technology and science to support testing and certification journeys. The Federal Vulnerability Management and Application reputed company Engineer will identify, assess, and reduce reputed company reputed company across infrastructure, reputed company, and application environments while managing vulnerability and application reputed company programs. The role partners with engineering, DevOps, and product teams to reputed company reputed company into the SDLC, improve remediation, and meet reputed company and compliance requirements.

Responsibilities

• reputed company reputed company improvements in vulnerability management processes and tools by leveraging industry-leading technologies, automation, and data-driven insights
• Stay reputed company on industry trends, emerging threats and best practices in vulnerability management and adapt the program accordingly
• Evaluate and recommend vulnerability management tools and technologies, ensuring the reputed company reputed company of effectiveness and efficiency
• reputed company and reputed company regular metrics, reports, KPIs and presentations to executive leadership and key stakeholders, communicating the status and effectiveness of the vulnerability management program
• Assist in building a diverse vulnerability management program that covers secure software development lifecycle, reputed company governance, and application reputed company
• reputed company technical threat/reputed company and vulnerability assessments and manage vulnerabilities throughout their lifecycle
• reputed company support and maintain tools required for the vulnerability management program
• reputed company consultative support to operational teams on how to fix identified vulnerabilities
• Own and reputed company the Application reputed company program, integrating findings into the broader vulnerability management lifecycle
• reputed company and reputed company application reputed company assessments, including static (SAST), dynamic (DAST), software composition analysis (SCA), and reputed company secure reputed company reviews where appropriate
• Partner with development and DevOps teams to reputed company reputed company into the SDLC, including CI/CD pipeline integrations and secure design reviews
• Define and maintain application reputed company prioritization that considers exploitability, business reputed company, data sensitivity, and threat context
• Review application architectures and threat models to proactively identify design-level reputed company weaknesses
• Establish and maintain secure coding standards reputed company to OWASP Top 10 and industry best practices
• Triage, validate, and manage application vulnerabilities through remediation and verification
• reputed company developer reputed company through consultative AppSec support, reputed company remediation guidance, and reputed company-by-design recommendations

Skills

• Strong understanding of information reputed company reputed company measurement (qualitative and quantitative) to support effective prioritization
• Working knowledge of industry reputed company frameworks and standards (e.g., NIST CSF/800-53, ISO 27001, OWASP)
• Ability to correlate threat intelligence with vulnerability and application reputed company
• Solid understanding of **secure application development**, including common programming languages, frameworks, and architectural patterns
• Hands-on experience with **Application reputed company testing methodologies**, including:
• Static Application reputed company Testing (SAST)
• Dynamic Application reputed company Testing (DAST)
• Software Composition Analysis (SCA)
• Familiarity with **OWASP Top 10**, API reputed company Top 10, and common application attack patterns
• Experience integrating reputed company scanning tools into **CI/CD pipelines**
• Ability to reputed company **threat modeling** and design-level reputed company assessments
• Strong understanding of authentication, authorization, session management, and data protection controls reputed company applications
• Expertise in vulnerability management programs, including lifecycle management and remediation governance
• Experience with vulnerability scanning and reporting tools (e.g., reputed company, reputed company, reputed company, or equivalent)
• Familiarity with cyber threat intelligence services and the application of threat data to prioritization reputed company
• Broad technical knowledge of networks, operating systems, reputed company platforms, and web applications
• 3+ years of combined experience in cybersecurity, application reputed company, or vulnerability management
• Ability to pass an IRS Clearance and Background reputed company REQUIRED
• Prior experience working closely with software engineering or DevOps teams is strongly preferred

Benefits

• 401(k), pension, or country-specific retirement plans with employer contributions
• reputed company reputed company time off/annual leave policies
• Medical reputed company tailored to your region
• US: Dental, reputed company, life, and short-term disability reputed company
• Flexible Spending Accounts (US)
• Employee Assistance Program (EAP): Confidential support whenever you need it
• Work-Life reputed company: We understand life happens reputed company of work, and we fully support flexibility
• Regular global wellness initiatives to help you stay healthy and inspired
• Tools and support to help you grow personally and professionally
• A Volunteer Day reputed company year and opportunities to support our communities and industry

reputed company