Cybersecurity Engineer Jobs in Washington

INTRODUCTION

We are looking for a skilled Security Analyst / Engineer to strengthen our organization's security posture. This role sits at the intersection of application security, vulnerability management, and incident response — working closely with engineering, IT, and security teams to identify, assess, and remediate risks across our systems and applications. The ideal candidate combines hands-on technical expertise with strong cross-functional coordination skills.

KEY RESPONSIBILITIES

Application Security

- Conduct security assessments, code reviews, and threat modeling for web, mobile, and API-based applications.
- Partner with development teams to integrate security best practices into the SDLC (Secure SDLC / DevSecOps).
- Perform static (SAST) and dynamic (DAST) application security testing, and triage results for remediation.
- Review and recommend secure design patterns for new features and architecture changes.

Vulnerability Management

- Run and manage vulnerability scanning programs across infrastructure, endpoints, and applications.
- Prioritize and track identified vulnerabilities based on risk, exploitability, and business impact.
- Coordinate timely remediation with system owners and engineering teams; track SLAs to closure.
- Maintain vulnerability management dashboards, metrics, and reporting for leadership.

Incident Response

- Monitor security alerts and lead/participate in investigation, containment, and remediation of security incidents.
- Perform root cause analysis and develop after-action reports with corrective recommendations.
- Maintain and continuously improve incident response playbooks and runbooks.
- Support digital forensics and evidence collection as needed during investigations.

Cross-Team Coordination

- Act as a liaison between security, engineering, IT, and compliance teams on security initiatives.
- Communicate risk findings clearly to both technical and non-technical stakeholders.
- Support security awareness efforts and contribute to internal security policies and standards.
- Participate in audits, risk assessments, and compliance activities (e.g., SOC 2, ISO 27001, PCI-DSS) as required.

REQUIRED QUALIFICATIONS

- Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent practical experience).
- 5+ years of experience in application security, vulnerability management, or incident response.
- Hands-on experience with vulnerability scanning tools (e.g., Nessus, Qualys, Tenable) and AppSec tools (e.g., Burp Suite, OWASP ZAP, Checkmarx, Snyk).
- Solid understanding of common vulnerability frameworks and standards (OWASP Top 10, CVSS, CWE/CVE).
- Familiarity with incident response frameworks (e.g., NIST SP 800-61) and SIEM platforms (e.g., Splunk, Sentinel, QRadar).
- Strong knowledge of networking, operating systems (Linux/Windows), and cloud environments (AWS/Azure/GCP).