Location: Hybrid – DMV area (DC, MD, VA) | Monthly onsite in Reston, VA
Company Overview
Glint Tech Solutions is a women-owned global staffing and IT recruiting firm connecting top technical talent with leading enterprise clients across the United States.
Project Description
Our client, a leading healthcare payor in Reston, VA, is seeking a software-focused Application Cyber Security Engineer to support DevSecOps, AWS Cloud Security, and cloud migration initiatives. This is primarily a remote role with required monthly onsite visits to Reston, VA. Candidates must reside in the DC, MD, or VA area — travel expenses will not be reimbursed. The interview process includes 2 rounds with a mandatory F2F final round in Reston, VA.
Key Responsibilities
-
Develop and implement application security solutions; architect and engineer trusted systems into secure systems
-
Support DevSecOps practices including SAST, DAST, IAST, SCA, penetration testing, secure code review, and threat modeling
-
Secure AWS environments across IAM, EC2, S3, Lambda, EKS, CloudTrail, Security Hub, and GuardDuty
-
Manage Kubernetes and container security including Amazon EKS, pod security, RBAC, network policies, and runtime hardening
-
Operate CNAPP, CSPM, KSPM, and CWPP platforms such as Wiz, CrowdStrike, or similar solutions
-
Map application and cloud-native controls to frameworks including NIST CSF, NIST 800-53, ISO 27001, SOC2, CIS Benchmarks, and MITRE ATT&CK
-
Implement infrastructure-as-code and policy-as-code using Terraform, Helm, CloudFormation, and Rego/OPA
-
Collaborate with development teams to communicate security findings and drive practical remediation
-
Advise management on cybersecurity policies, processes, and procedures
Mandatory Skills
-
Strong hands-on experience in Application Security, Secure SDLC, DevSecOps, Cloud Security, and Vulnerability Management
-
Deep knowledge of OWASP Top 10, API Security Top 10, and secure coding practices
-
Hands-on experience with CNAPP, CSPM, KSPM, CWPP platforms (Wiz, CrowdStrike, or similar)
-
Hands-on AWS cloud security experience across core services
-
Deep knowledge of Kubernetes and container security including Amazon EKS
-
Strong CI/CD and DevSecOps pipeline security experience
-
Experience with IaC and policy-as-code tools — Terraform, Helm, CloudFormation, Rego/OPA
-
Strong written and verbal communication skills for both technical and non-technical audiences
-
One or more certifications required: CISSP, CISM, CEH, or CISA
Nice-to-Have Skills
-
AWS Certified Security Specialty certification
-
Experience in healthcare or similarly regulated industries
-
Background in cloud migration security initiatives
