AshburnConsulting
Senior Security Code Reviewer
- Compensation
- Not disclosed
- Location
- Camp Springs, MD, us
- Work setup
- Hybrid
- Seniority
- Senior
- Employment
- Contract
- Experience
- 10+ years
- Category
- Not specified
- Posted
Skills
Must have
- Candidates must be U.S. citizens.
- Candidates must be willing and able to work as Ashburn W-2 employees. 1099 and corp-to-corp arrangements are not permitted for these roles.
- DHS EOD / suitability is required.
- 10+ years of experience automating application security scanning processes, Zero Trust integration, and data sanitization for Government or similarly complex enterprise systems.
- Experience deploying and using Application Security Testing platforms such as Checkmarx.
- Experience automating or supporting Zero Trust Network Access (ZTNA) and Secure Web Gateway (SWG) solutions.
- Advanced security engineering experience across on-premises and cloud environments.
- Experience implementing AWS security best practices, including VPC Flow Logs, Security Lake, and audit monitoring.
- Experience building EKS clusters using Terraform and Kubernetes.
- Experience creating custom hardened AMI builds.
- Experience integrating network security tools such as Palo Alto, AlgoSec, Gigamon, and Corelight.
- Experience reviewing, evaluating, and improving security of complex systems and networks.
- Experience with vulnerability management, SIEM integrations, certificate management, single sign-on implementations, and federal regulatory compliance.
- Demonstrated ability to lead security code reviews and conduct risk assessments.
- Experience developing OS hardening strategies, evaluating firewall policies, and implementing enterprise infrastructure monitoring solutions.
Full description
Ashburn is seeking a Senior Security Code Reviewer to support a federal cybersecurity architecture opportunity. This Key Personnel role will lead application security testing, secure code review, DevSecOps pipeline integration, secure development guidance, risk assessments, and cloud/network security evaluation for a proposal opportunity.
Primary Responsibilities
- Conduct security code reviews and risk assessments for applications and enterprise systems.
- Use application security testing tools to identify vulnerabilities and provide remediation guidance.
- Integrate security testing into DevSecOps and CI/CD pipelines.
- Review application architecture, source code, dependencies, infrastructure-as-code, and deployment practices.
- Support secure coding standards, developer security training, and technical remediation guidance.
- Evaluate and improve cloud, network, and enterprise system security.
- Provide technical writing, reporting, and mentoring to engineering and development teams.
- Support federal cybersecurity compliance objectives and secure development lifecycle requirements.
Required Qualifications
- Candidates must be U.S. citizens.
- Candidates must be willing and able to work as Ashburn W-2 employees. 1099 and corp-to-corp arrangements are not permitted for these roles.
- DHS EOD / suitability is required.
- 10+ years of experience automating application security scanning processes, Zero Trust integration, and data sanitization for Government or similarly complex enterprise systems.
- Experience deploying and using Application Security Testing platforms such as Checkmarx.
- Experience automating or supporting Zero Trust Network Access (ZTNA) and Secure Web Gateway (SWG) solutions.
- Advanced security engineering experience across on-premises and cloud environments.
- Experience implementing AWS security best practices, including VPC Flow Logs, Security Lake, and audit monitoring.
- Experience building EKS clusters using Terraform and Kubernetes.
- Experience creating custom hardened AMI builds.
- Experience integrating network security tools such as Palo Alto, AlgoSec, Gigamon, and Corelight.
- Experience reviewing, evaluating, and improving security of complex systems and networks.
- Experience with vulnerability management, SIEM integrations, certificate management, single sign-on implementations, and federal regulatory compliance.
- Demonstrated ability to lead security code reviews and conduct risk assessments.
- Experience developing OS hardening strategies, evaluating firewall policies, and implementing enterprise infrastructure monitoring solutions.
- Strong technical writing, training, and mentoring skills.