Senior Software Assurance Engineer - SDLC Security

COLSA Corporation; Job; Sur place; EUR 95 000 - 129 000; Plein temps

Avantages offerts par ce poste

Medical

Dental

Vision

Life Insurance

Short-Term Disability

Long-Term Disability

401(k) with company match

Paid Time Off and Holidays

Résumé du poste

COLSA Corporation in Huntsville, Alabama, seeks an experienced Software Assurance Engineer to secure complex software through the SDLC, focusing on vulnerability identification and remediation, and readiness for materiel release.

You will apply SAST/DAST/IAST, analyze CWEs/CVEs, coordinate with software teams, and evaluate tools such as Fortify, Coverity, Semgrep, and Cppcheck to improve security practices across projects.

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Information Systems, Engineering, or related field.
• Minimum of 8 years of related experience
• Experience integrating security practices throughout the Software Development Lifecycle (SDLC).
• Experience supporting software assessments, authorization, or materiel release activities
• Hands-on experience performing application security testing, such as SAST, DAST, IAST, fuzzing, and/or penetration testing.
• Ability to obtain and maintain a Secret Security Clearance prior to start; and willing and able to obtain a Top Secret clearance, if required by the customer

Responsabilités

• Conducts Application Security Testing: Plans and executes investigations and tests of considerable complexity, including SAST, DAST, IAST, fuzzing, and penetration testing.
• Vulnerability Analysis & Remediation: Analyzes source code and compiled binaries to identify security flaws, mapping findings to CWEs and CVEs.
• Advanced Problem Solving: Develops and applies advanced methods, theories, and research techniques in the investigation and solution of complex software security problems.
• Project Coordination: Coordinates efforts of software engineers, development teams, and technical support staff in the performance of SwA projects, ensuring security is integrated throughout the SDLC.
• Materiel Release Support: Plans, conducts, and directs major phases of significant SwA projects to ensure software meets safety and security standards for materiel release.
• Technical Review: Reviews completion and implementation of technical products to ensure remediations are effective and compliant with security practices.
• Tool & Vendor Evaluation: May evaluate vendor capabilities and SwA tools to provide testing products or services.
• Industry Research: Reviews literature, patents, and current practices relevant to application security projects.
• Technical Leadership: May provide technical consultation and leadership regarding secure coding practices.

Connaissances

SAST

DAST

IAST

Vulnerability analysis

Security standards

Formation

Bachelor's degree in Computer Science or related field

Outils

Fortify

Coverity

Semgrep

Cppcheck

Description du poste

COLSA Corporation in Huntsville, Alabama, seeks an experienced Software Assurance Engineer to secure complex software through the SDLC, focusing on vulnerability identification and remediation, and readiness for materiel release.

You will apply SAST/DAST/IAST, analyze CWEs/CVEs, coordinate with software teams, and evaluate tools such as Fortify, Coverity, Semgrep, and Cppcheck to improve security practices across projects.