Onsite TS/SCI Cybersecurity Engineer - App Security & RMF

Cybersecurity Jobs; Washington (District of Columbia); On-site; USD 140,000 - 170,000; Full time

Job summary

Data Systems Analysts, Inc. seeks a TS/SCI-cleared Cybersecurity Engineer focused on application security for an onsite NGIC role in Washington, DC. The engineer will test and improve security, translate requirements into solutions, and document RMF/ATO evidence for DoD missions.

Responsibilities include securing applications, APIs, and back-end services; conducting security testing; reviewing code; and integrating SAST/DAST tools into CI/CD pipelines. Requires 5+ years in security roles.

Qualifications

• BS degree in Computer Science, Software Engineering, or related field; substitution allowed.
• Minimum 5 years in software development, application security, or secure software assessment.
• Hands-on development in Python/Java/C#/Go/JavaScript with backend services and databases.
• Knowledge of OWASP Top 10 and CWE; ability to assess exploitability and remediation.
• Ability to work independently as the primary software security resource on a team.

Responsibilities

• Own software security within the cyber engineering team for applications, APIs, and back-end services.
• Test applications, validate fixes, and ensure secure coding standards are met.
• Review source code for vulnerabilities and insecure design; perform security testing.
• Implement and maintain SAST/DAST tools and integrate into CI/CD pipelines.
• Assess tools, risk, and suitability; communicate risks to engineers and leadership.
• Document RMF/ATO evidence and communicate findings and fixes clearly.

Skills

Python/Java/C#/Go/JavaScript

Code review

Security testing

OWASP Top 10

Education

BS degree in Computer Science or related field

Tools

Fortify

SonarQube

Checkmarx

Burp Suite

OWASP ZAP

GitLab

Jenkins

Job description

Data Systems Analysts, Inc. seeks a TS/SCI-cleared Cybersecurity Engineer focused on application security for an onsite NGIC role in Washington, DC. The engineer will test and improve security, translate requirements into solutions, and document RMF/ATO evidence for DoD missions.

Responsibilities include securing applications, APIs, and back-end services; conducting security testing; reviewing code; and integrating SAST/DAST tools into CI/CD pipelines. Requires 5+ years in security roles.