AppSec Engineer (TS/SCI) – DoD Cyber

datasystemsanalystsinc; Charlottesville (VA); On-site; USD 140,000 - 170,000; Full time

Job summary

Data Systems Analysts, Inc. (DSA) is seeking a TS/SCI-cleared Cybersecurity Engineer (Application Security) to secure software supporting mission-critical DoD systems.

You will own software security within the cyber engineering team, test applications, review code, validate vulnerabilities, and ensure security tools and processes are in place. Work with engineers, ISSOs, and ISSMs to translate security requirements into practical solutions, applying MITRE ATT&CK and threat modeling.

Qualifications

• BS degree in Computer Science, Software Engineering, Computer Information Systems, Cybersecurity, or related field.
• Experience may be substituted for degree.
• TS/SCI Clearance.
• CompTIA Security+ (DoD 8140 compliant).

Responsibilities

• Own software security within the cyber engineering team, providing technical guidance on securing applications, APIs, and back-end services.
• Perform security testing of applications and validate that fixes resolve identified findings.
• Review source code against secure coding standards to identify vulnerabilities, insecure design, and exploitable weaknesses.
• Implement, tune, and maintain software security tools (SAST, DAST, dependency and container scanning) and integrate them into development and release processes.
• Evaluate open-source and commercial cyber tools and source code to determine fit, security risk, and what can be adapted to meet mission requirements.
• Partner with engineers, system admins, architects, ISSOs, and ISSMs to define security requirements and confirm tools and controls are sufficient.
• Assess risk from major software changes, unpatched components, and software reaching end of support.
• Apply adversary techniques (such as MITRE ATT&CK) and threat modeling to prioritize findings by real-world impact.
• Document independent test results, release risk, and technical evidence supporting RMF and ATO activities.
• Communicate software risks, findings, and practical fixes to technical teams, system owners, and leadership.

Skills

Python

Java

C#

Go

JavaScript

Application security

Security testing

Code review

CI/CD security

Threat modeling

Education

BS degree in Computer Science, Software Engineering, Computer Information Systems, Cybersecurity, or related field

Tools

Fortify

SonarQube

Checkmarx

Burp Suite

OWASP ZAP

Job description

Data Systems Analysts, Inc. (DSA) is seeking a TS/SCI-cleared Cybersecurity Engineer (Application Security) to secure software supporting mission-critical DoD systems.

You will own software security within the cyber engineering team, test applications, review code, validate vulnerabilities, and ensure security tools and processes are in place. Work with engineers, ISSOs, and ISSMs to translate security requirements into practical solutions, applying MITRE ATT&CK and threat modeling.