DoD Onsite Application Security Engineer (TS/SCI)

Data Systems Analysts, Inc.; Arlington (VA); On-site; USD 140,000 - 170,000; Full time

Job summary

Data Systems Analysts, Inc. seeks a TS/SCI-cleared Cybersecurity Engineer focused on application and software security for onsite work supporting mission-critical DoD systems at NGIC in Arlington, VA.

You will drive secure development practices, perform code reviews, and validate remediations across applications, APIs, and back-end services. You will apply MITRE ATT&CK, conduct security testing, and generate RMF/ATO evidence while collaborating with engineers, ISSOs, and system owners to

Qualifications

• BS degree in Computer Science, Software Engineering, Computer Information Systems, Cybersecurity, or a related field.
• TS/SCI Clearance.
• 5+ years of experience in software development, application security, or secure software assessment.
• Hands-on development in Python, Java, C#, Go, or JavaScript.
• Knowledge of OWASP Top 10 and CWE; ability to remediate weaknesses.
• Ability to work with DoD systems and stakeholders.

Responsibilities

• Own software security responsibilities within a cyber engineering team, guiding secure applications, APIs, and back-end services.
• Conduct security testing of applications and validate remediations.
• Perform source code reviews aligned to secure coding standards to detect vulnerabilities.
• Implement, tune, and maintain security tooling (SAST, DAST, dependencies, containers).
• Assess open-source and commercial cyber tools for fit and risk.
• Collaborate with engineers, ISSOs, and ISSMs to define security requirements.
• Evaluate risks from major software changes and end-of-support components.
• Apply MITRE ATT&CK and threat modeling to prioritize findings.
• Document test results and RMF/ATO evidence.
• Communicate risks and fixes to engineers and leadership.

Skills

Secure development

Threat modeling

Code review

Stakeholder comms

Independent contributor

Education

BS degree in CS/SE/CIIS/Cybersecurity or related

Tools

Fortify

SonarQube

Checkmarx

Burp Suite

OWASP ZAP

GitLab

Jenkins

Job description

Data Systems Analysts, Inc. seeks a TS/SCI-cleared Cybersecurity Engineer focused on application and software security for onsite work supporting mission-critical DoD systems at NGIC in Arlington, VA.

You will drive secure development practices, perform code reviews, and validate remediations across applications, APIs, and back-end services. You will apply MITRE ATT&CK, conduct security testing, and generate RMF/ATO evidence while collaborating with engineers, ISSOs, and system owners to