Cybersecure Software Assurance Analyst

Quantum Research International; Springfield (VA); On-site; USD 110,000 - 150,000; Full time

Job summary

Quantum Research International, Inc. is seeking a motivated Secure Software Assessor to join the NGA DEFENDER Cybersecurity Software Assurance team at NGA Campus East in Springfield, VA. You will evaluate software security risks across the Software Development Life Cycle.

Responsibilities include applying the NGA SWAP process, coordinating with engineering, and performing static code analysis. TS/SCI with CI Polygraph, a bachelor’s degree (or Sec+/CSSLP/GSEC in lieu), and Open-Source research

Qualifications

• TS/SCI eligible, CI Polygraph.
• Bachelor’s degree; in lieu, Sec+, CSSLP, or GSEC accepted.
• Experience with CND Intelligence Analysis, Assessments, and/or Open-Source Research.
• Knowledge of government data security standards and handling of classified information.
• Knowledge of computer networking concepts, protocols, and network security.
• Understanding of the software development lifecycle.

Responsibilities

• Apply NGA SWAP process for software requests.
• Capture security controls during requirements phase.
• Consult with engineering to evaluate hardware/software interfaces.
• Evaluate hardware configuration considering costs and security.
• Identify basic coding flaws and security implications.
• Address security needs within time and cost constraints.
• Coordinate with development teams on custom code requests.
• Perform NGA static code analysis processes.

Skills

CND Intelligence Analysis

Open-Source Research

Software Security Concepts

Security Documentation / Risk

Education

Bachelor’s degree or Sec+/CSSLP/GSEC

Tools

Fortify

GitLab

Job description

Quantum Research International, Inc. is seeking a motivated Secure Software Assessor to join the NGA DEFENDER Cybersecurity Software Assurance team at NGA Campus East in Springfield, VA. You will evaluate software security risks across the Software Development Life Cycle.

Responsibilities include applying the NGA SWAP process, coordinating with engineering, and performing static code analysis. TS/SCI with CI Polygraph, a bachelor’s degree (or Sec+/CSSLP/GSEC in lieu), and Open-Source research