Open-Source Software Security SME

ECS; Arlington (VA); Híbrido; USD 185.000 - 235.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Descripción de la vacante

Everforth ECS in Arlington, VA is seeking an Open-Source Software Security SME to join our hybrid team. You will strengthen OSS security through vulnerability analysis, hands-on development, and collaboration with open-source communities and internal teams for CISA projects.

The role requires US citizenship, a CS-related degree, and 8+ years in software security, with deep OSS experience. You will apply SBOMs, secure development practices, and AI-assisted tooling to identify risks and drive

Formación

• US citizenship with ability to obtain and maintain DHS Suitability (EOD).
• Bachelor’s degree in computer science, cybersecurity, software engineering, or related technical field.
• Minimum of 8 years’ professional experience in software development, cybersecurity, or related technical roles.
• At least 8 years of hands-on experience in open-source software security, application security, or vulnerability research.
• Experience in open-source software security, vulnerability analysis, and software development.
• Demonstrated experience developing, testing, and contributing code to production software systems, and open-source projects.
• Knowledge of secure development practices, dependency management, SBOMs, and software supply chain security.
• Experience using AI-assisted development or security tools and validating their results.
• Strong communication skills and ability to work across technical teams.

Responsabilidades

• Support CISA’s Secure by Design initiatives and engagement with open-source organizations, maintainers, and vendors.
• Use AI-assisted tools to identify and analyze OSS vulnerabilities, validate findings, and recommend remediation.
• Assess existing vulnerabilities and identify opportunities for software hardening and modernization.
• Provide technical guidance on dependency management, Software Bills of Materials (SBOMs), and software supply chain risks.
• Translate CISA guidance into working tools and software contributions suitable for acceptance into active open-source projects.
• Contribute code, testing, and documentation to an open-source coding agent used as a reference implementation.
• Collaborate with vulnerability management, threat hunting, AI, product, and platform engineering teams.
• Participate in technical pilots and open-source community engagements.

Conocimientos

OSS security

Vulnerability analysis

Open-source dev

SBOMs

Supply chain

AI-assisted tools

Code contribution

Secure dev practices

Communication

Dependency mgmt

Educación

Bachelor's degree in CS / cybersecurity / software engineering

Descripción del empleo

Everforth ECS is seeking a Open-Source Software Security SME to join our team in Arlington, VA (Hybrid).

ECS is seeking an Open-Source Software (OSS) Security Subject Matter Expert to support the Cybersecurity and Infrastructure Security Agency (CISA). This role will strengthen open-source software security through vulnerability analysis, hands-on software development, and collaboration with technical teams and the open-source community. This is a hybrid position.

Key Responsibilities

• Support CISA’s Secure by Design initiatives and engagement with open-source organizations, maintainers, and vendors.
• Use AI-assisted tools to identify and analyze OSS vulnerabilities, validate findings, and recommend remediation.
• Assess existing vulnerabilities and identify opportunities for software hardening and modernization.
• Provide technical guidance on dependency management, Software Bills of Materials (SBOMs), and software supply chain risks.
• Translate CISA guidance into working tools and software contributions suitable for acceptance into active open-source projects.
• Contribute code, testing, and documentation to an open-source coding agent used as a reference implementation.
• Collaborate with vulnerability management, threat hunting, AI, product, and platform engineering teams.
• Participate in technical pilots and open-source community engagements.

Salary Range: $185,000 - $235,000

Required Skills

• US citizenship with ability to obtain and maintain DHS Suitability (EOD).
• Bachelor’s degree in computer science, Cybersecurity, Software Engineering, or related technical field
• Minimum of 8 years’ professional experience in software development, cybersecurity, or related technical roles
• At least 8 years of hands-on experience in open-source software security, application security, or vulnerability research
• Experience in open-source software security, vulnerability analysis, and software development.
• Demonstrated experience developing, testing, and contributing code to production software systems, and open-source projects.
• Knowledge of secure development practices, dependency management, SBOMs, and software supply chain security.
• Experience using AI-assisted development or security tools and validating their results.
• Strong communication skills and ability to work across technical teams.

Desired Skills

• 10+ years of professional experience in software security, with at least 7 years in open-source security
• Experience supporting CISA, DHS, or other federal cybersecurity agencies or programs
• Previous work with critical infrastructure protection or national cybersecurity initiatives
• Experience in technical leadership or architect role guiding security strategy
• Familiarity with Secure by Design initiatives.
• Experience with an Open-Source Program Office (OSPO) or open-source coding agents.