{"schemaVersion":"jobsearcher.job.v1","id":"f72db7df5296977ee84c2c0e","url":"https://jobsearcher.com/jobs/f72db7df5296977ee84c2c0e","canonicalUrl":"https://jobsearcher.com/jobs/f72db7df5296977ee84c2c0e","title":"Security Engineer (Web Application)","description":"gTANGIBLE Corporation (gTC), www.gtangible.com, is a C corporation and a registered Government contractor that provides services and solutions in:\nNational Security Programs\nProfessional, Administrative, and Management Support\nMission and Warfighter Support\n\nWe are a Service-Disabled Veteran-Owned Small Business (SDVOSB) and the founder has years of successful experience in the Government contracting arena. Our leadership team is an exceptional group of Government contracting professionals. gTANGIBLE is in the process of identifying candidates for the following position.\nRequisition Type: Full Time\nPosition Status: Contingent\nPosition Title: Security Engineer (Web Application)\nLocation: Arlington, VA\nSecurity Clearance: Secret\n\nDuties and Responsibilities\nThe Security Engineer (Web Application) supports this Transportation Security Administration Information Technology (TSA IT) Task Order (TO) by web application testing that require testing both via automated tools and with manual testing techniques. Application testing will require authenticated and non-authenticated testing to ensure full evaluation of the cybersecurity controls for the applications. Off hours testing conducted on a as needed basis. Periodic travel required. Duties include the following:\nIdentifies flaws in business logic, programmatic vulnerabilities and weaknesses, and ensures appropriate and consistent risk levels are assigned to such findings.\nIdentifies policy gaps, deficiencies and recommends updates, additions, and modification to TSA security policy.\nConducts security testing of web applications, web services, end points, (and other web-related assets) using both Information Assurance & Cybersecurity Division (IAD)-provided automated testing tools and manual testing techniques.\nAnalyzes and validates test results and removes false positives and submits to stakeholders.\nParticipates with stakeholders regarding findings meetings and responses.\nProvides Subject Matter Expertise on emerging web and mobile technologies, languages, and frameworks. In addition, also provide and support on external security audits conducted of the TSA.\nKnowledge and Qualifications\nAt least ten (10) years of technical IT security experience.\nAt least five (5) years of experience performing web application security testing, software development and/or testing.\nAt least three (3) years of experience performing web application security testing using manual techniques and vulnerability testing tools and/or code review tools for Federal IT systems.\nAbility to work independently/minimal oversight.\nExperience with manual web security testing techniques.\nStrong understanding of NIST SP 800-53 and DISA STIGS.\nRequired Certifications: CISSP, CEH, GWAPT or other relevant certifications.\nExperience with WebInspect, AppScan, BurpSuite, SmartBear SoapUI, Nessus Professional, HP Fortify, Apple Developers Toolkit, Eclipse, and Wireshark.\nStrong organizational, analytical, and technical writing skills to be able to document findings in reports.\ngTANGIBLE Corporation is an equal opportunity employer and does not discriminate against any employee or applicant because of race, age, sex, color, physical or mental disability, religion, sexual orientation, marital status, national origin, or political affiliation.","company":"Gtangible","rawCompany":"gtangible","city":"Arlington","state":"VA","isRemote":false,"isActive":false,"createdAt":"2026-08-06T11:27:34.420Z","occupations":[{"code":"15-1299.04","title":"Penetration Testers","slug":"penetration-testers"},{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"},{"code":"541690","title":"Other Scientific and Technical Consulting Services","slug":"other-scientific-and-technical-consulting-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Security Engineer (Web Application)","description":"gTANGIBLE Corporation (gTC), www.gtangible.com, is a C corporation and a registered Government contractor that provides services and solutions in:\nNational Security Programs\nProfessional, Administrative, and Management Support\nMission and Warfighter Support\n\nWe are a Service-Disabled Veteran-Owned Small Business (SDVOSB) and the founder has years of successful experience in the Government contracting arena. Our leadership team is an exceptional group of Government contracting professionals. gTANGIBLE is in the process of identifying candidates for the following position.\nRequisition Type: Full Time\nPosition Status: Contingent\nPosition Title: Security Engineer (Web Application)\nLocation: Arlington, VA\nSecurity Clearance: Secret\n\nDuties and Responsibilities\nThe Security Engineer (Web Application) supports this Transportation Security Administration Information Technology (TSA IT) Task Order (TO) by web application testing that require testing both via automated tools and with manual testing techniques. Application testing will require authenticated and non-authenticated testing to ensure full evaluation of the cybersecurity controls for the applications. Off hours testing conducted on a as needed basis. Periodic travel required. Duties include the following:\nIdentifies flaws in business logic, programmatic vulnerabilities and weaknesses, and ensures appropriate and consistent risk levels are assigned to such findings.\nIdentifies policy gaps, deficiencies and recommends updates, additions, and modification to TSA security policy.\nConducts security testing of web applications, web services, end points, (and other web-related assets) using both Information Assurance & Cybersecurity Division (IAD)-provided automated testing tools and manual testing techniques.\nAnalyzes and validates test results and removes false positives and submits to stakeholders.\nParticipates with stakeholders regarding findings meetings and responses.\nProvides Subject Matter Expertise on emerging web and mobile technologies, languages, and frameworks. In addition, also provide and support on external security audits conducted of the TSA.\nKnowledge and Qualifications\nAt least ten (10) years of technical IT security experience.\nAt least five (5) years of experience performing web application security testing, software development and/or testing.\nAt least three (3) years of experience performing web application security testing using manual techniques and vulnerability testing tools and/or code review tools for Federal IT systems.\nAbility to work independently/minimal oversight.\nExperience with manual web security testing techniques.\nStrong understanding of NIST SP 800-53 and DISA STIGS.\nRequired Certifications: CISSP, CEH, GWAPT or other relevant certifications.\nExperience with WebInspect, AppScan, BurpSuite, SmartBear SoapUI, Nessus Professional, HP Fortify, Apple Developers Toolkit, Eclipse, and Wireshark.\nStrong organizational, analytical, and technical writing skills to be able to document findings in reports.\ngTANGIBLE Corporation is an equal opportunity employer and does not discriminate against any employee or applicant because of race, age, sex, color, physical or mental disability, religion, sexual orientation, marital status, national origin, or political affiliation.","datePosted":"2026-08-06T11:27:34.420Z","dateModified":"2026-08-06T11:27:34.420Z","hiringOrganization":{"@type":"Organization","name":"Gtangible","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Arlington","addressRegion":"VA","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"f72db7df5296977ee84c2c0e"},"url":"https://jobsearcher.com/jobs/f72db7df5296977ee84c2c0e"}}