Application Cyber Security Engineer

1. Note: Submit your W2 Candidates ONLY - No 1099 No Sub Contracting No OPT- CPT H4-EAD OR H1B Transfers
2. Supplier/ Partner: Limit to submit only 1 resume per position (Check with me for 2^nd resume)
3. Local Photo ID (Drivers License or State ID) and Work Authorization are a Must while submitting the resume

Follow This Submission Format ONLY for your Submission

Subject: Candidate name and Position Name

1. First Legal Name:
2. Middle Legal Name:
3. Last Legal Name:
4. Position & REQ #:
5. Hourly Pay Rate:
6. Salary Conversion (if applicable): $ (Must fill if C2H Position)
7. C2C Shop Name (if applicable): (Must Fill)
8. C2C Shop agrees to the insurance requirements. (if applicable): (Must Fill)
9. Eligibility Status (US Citizen/GC/H1B):
10. Availability to Interview:
11. Availability to Start:
12. Residence (City/State):

1. Are you presently in your current location (As #12) (Y/N) (Must Fill)
2. Are you presently on Vacation or travelling to another state(Y/N) (Must Fill)

1. Willing to F2F Interview (N/A for out of state unless position requires it):
2. Relationships to any current staff members at CareFirst BCBS (Y/N):
3. Previously worked for CareFirst BCBS (Y/N):
4. Does the candidate have a working laptop/computer to use - No MACs (Y/N): (Must Fill)
5. Email:
6. Contact Number:
7. Birthday (Month/Day only):
8. LinkedIn Link (MUST):
9. Attach local Photo ID & work Authorization Docs(Y/N): (Must Fill)

If No then please dont submit

Application Cyber Security Engineer (not traditional infrastructure security.)

Client: Carefirst

Rate Confirmation: $70-$80(Max)/hr. on W2 or $80 - $90/hr. on C2C
Work Mode: Hybrid onsite in Reston VA every month (1DAY)
Candidates from Approved States ONLY: DC MD VA (Only)
Duration : 12 Months
Eligibility: USC/GC/ GC-EAD
Interview Mode: 2 rounds the second round will be an F2F

Must Have:

* Current Health Insurance Customer Experience Strongly preferred

• Application Security
• DevSecOps
• AWS Cloud Security
• Secure SDLC
• Vulnerability Management
• OWASP Top 10 & API Security Top 10
• SAST DAST IAST SCA
• Manual Penetration Testing Secure Code Review Threat Modeling
• Kubernetes & Container Security (Amazon EKS)
• CI/CD Security & Secure Pipeline Practices
• CNAPP CSPM KSPM or CWPP (preferably Wiz or CrowdStrike)
• Infrastructure-as-Code (Terraform Helm CloudFormation) & Policy-as-Code (Rego/OPA)
• Security Frameworks: NIST CSF NIST 800-53 ISO 27001 SOC 2 CIS Benchmarks MITRE ATT&CK
• Required Certification: CISSP CISM CEH or CISA (at least one)

Application Cyber Security Engineer

We are seeking a Software Focused Cyber Security Engineer to support our customer with DevSecOps DevOps AWS Cloud Security Cloud Migration related tasks. Although this position is primarily remote monthly visits to our clients Reston VA office are required along with a final F2F interview in Reston VA. We are seeking candidates that reside in the nearby area to accommodate both as expenses will not be paid.

The selected candidate will:

• Develops and implements security solutions. Administers security technology systems by architecting and engineering/developing trusted systems into secure systems.
• Assists in the development of implementation and deployment plans that are aligned to the organizational strategic plan objectives and security requirements.
• Advises management in developing cybersecurity policies processes and procedures.
• Assists with engineering support and system administration of specialized cybersecurity solutions.
• Solves complex problems and answers routine questions about the installation operation configuration and customization of cybersecurity software.
• Identifies potential conflicts with the implementation of any cybersecurity solutions.
• Reviews and analyzes appropriate cybersecurity solution system logs for performance and functional anomalies.
• Works with system design architects and project managers to provide security requirements.

Required Skills

• Strong hands-on experience in Application Security Secure SDLC DevSecOps Cloud Security and Vulnerability Management.
• Deep understanding of OWASP Top 10 API Security Top 10 common vulnerability classes secure coding practices and modern exploit techniques.
• Hands-on experience with security testing tools and techniques including SAST DAST IAST SCA manual penetration testing secure code review and threat modeling.
• Extensive experience with CNAPP CSPM KSPM CWPP or cloud native security platforms preferably tools such as Wiz CrowdStrike or similar solutions.
• Hands-on experience securing AWS cloud environments preferably AWS including services such as IAM EC2 S3 Lambda EKS CloudTrail Security Hub GuardDuty or similar services.
• Deep knowledge of Kubernetes and container security including Amazon EKS pod security RBAC network policies image security runtime security and container hardening best practices.
• Direct experience mapping application and cloud native controls to frameworks such as NIST CSF NIST 800-53 ISO 27001 SOC2 CIS Benchmarks MITRE ATT&CK or similar frameworks.
• Strong working knowledge of CI/CD platforms DevOps toolchain and secure pipeline practices including building security artifact management secrets protection and code signing.
• Experience working directly with development teams to explain security findings recommend practical remediation and validate fixes.
• Hands-on experience securing AWS cloud environments including strong understanding of IAM networking logging monitoring encryption workload security and cloud security posture management.
• Experience with Infrastructure-as-Code (IaC) and Policy-as-Code practices using tools such as Terraform Helm CloudFormation Rego/OPA or similar technologies.
• Strong written and verbal communication skills with the ability to translate complex technical risks into clear recommendations for developers architects leadership and governance stakeholders.
• Security certifications such as CISSP AWS Certified Security Specialty CISA GWEB or similar credentials are preferred.

Required Certification (At Least One)

• CISSP Certified Information Systems Security Professional
• CISM Certified Information Security Manager
• CEH Certified Ethical Hacker
• CISA Certified Information Systems Auditor