Federal Cloud Security Software Engineer

Eccalon, LLC; Hanover (MD); On-site; USD 110,000 - 140,000; Full time

Job summary

Eccalon, LLC is seeking a Security Software Engineer to design and harden software for DoD programs under CMMC/NIST 800-171 compliance. You will embed security across the SDLC—design, code review, and CI/CD—while collaborating with engineering, DevSecOps, and IT in AWS GovCloud and Azure GCC High environments.

You will lead vulnerability management, implement IAM and SSO, and contribute to incident response with a strong focus on secure architecture and compliance.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, or related field—or equivalent experience.
• 3+ years of software engineering experience with a strong focus on security.
• Experience with secure coding practices and frameworks.
• Familiarity with NIST 800-171, CMMC, or FedRAMP security control requirements and evidence collection.
• Hands-on experience with AWS and/or Azure security services (IAM, WAF, Security Hub, Defender, Sentinel); GCC High or GovCloud experience a plus.
• Knowledge of OWASP Top 10 and threat modeling.

Responsibilities

• Design and develop secure software with a security-first mindset across the SDLC.
• Apply secure coding standards, threat modeling, and vulnerability mitigation aligned to NIST 800-53 and CMMC controls.
• Conduct architecture reviews and code hardening to address OWASP Top 10 and DoD STIGs.
• Automate security gates in CI/CD pipelines (SAST, DAST, dependency scanning, secrets detection).
• Design secure system and API architectures for multi-tenant cloud environments including GCC High and FedRAMP platforms.
• Implement IAM controls, SSO flows, least-privilege authorization; instrument apps for security logging and monitoring.

Skills

Security engineering

Secure coding

OWASP Top 10

Threat modeling

SAST/DAST tooling

Cloud security (AWS/Azure)

CI/CD security gates

Familiar with NIST 800-171/CMMC/FedRMP

Education

Bachelor’s degree in CS/Engineering or related field

Tools

AWS security services

Azure security services

GCC High/GovCloud

SAST/DAST tools (e.g., Snyk, Checkov, Prisma, Aqua)

Job description

Eccalon, LLC is seeking a Security Software Engineer to design and harden software for DoD programs under CMMC/NIST 800-171 compliance. You will embed security across the SDLC—design, code review, and CI/CD—while collaborating with engineering, DevSecOps, and IT in AWS GovCloud and Azure GCC High environments.

You will lead vulnerability management, implement IAM and SSO, and contribute to incident response with a strong focus on secure architecture and compliance.