Principal Cyber Software Engineer

Caribou Thunder

Colorado Springs (CO)

On-site

USD 100,000 - 117,000

Full time

28 hours ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Caribou Thunder is seeking a Principal Software Cyber Engineer to lead secure software architectures for a next-generation ground-based radar system supporting Space Domain Awareness. You will drive secure coding, vulnerability remediation, and compliance across mission software, development, and operations teams.

The role requires active Top Secret clearance and hands-on expertise in Java, Python, C/C++, Spring, and CI/CD within Linux environments (RHEL/Ubuntu).

Qualifications

Experience in secure software engineering for government or defense programs.
Proficient in secure coding, vulnerability remediation, and code reviews.
Familiar with defensive cyber operations and compliance frameworks.

Responsibilities

Lead the development and sustainment of secure software architectures and cybersecurity protections for mission software and supporting services within a ground-based radar system.
Design, develop, document, test, debug, and maintain software applications using Java, Python, JavaScript, C, C++, and Spring.
Collaborate with cross-functional teams to integrate security requirements throughout the SDLC.
Review source code, identify vulnerabilities, investigate defects, and implement secure coding practices.
Analyze static/dynamic security results, justify findings, and plan remediation.
Develop and maintain POA&Ms to track security findings and remediation progress.
Integrate security tools and gates into CI/CD pipelines for secure builds/releases.
Translate cybersecurity policies into developer tasks and acceptance criteria.
Support CM, source control, branching strategies, and controlled releases across Agile teams.
Assess dependencies, SBOMs, and supply chain risks for software integrity.
Apply NIST SP 800-53, RMF, and DISA STIG requirements where applicable.
Evaluate vulnerabilities in Linux (RHEL/Ubuntu) and remediate.
Support container security and orchestration hardening (Docker/Kubernetes) and image scanning.
Coordinate vulnerability lifecycle management and cross-environment remediation.
Help protect PII, classified, and export-controlled data in mission software.
Support CDS transfer approvals and cybersecurity compliance workflows.
Provide technical leadership to engineering teams and promote secure development practices.

Skills

Java

Python

JavaScript

C++

Spring Framework

Agile methodologies

Secure coding practices

POA&Ms

CI/CD

Tools

Docker

Kubernetes

SAST tools

Fortify

SonarQube

RMF

Job description

Back Principal Cyber Software Engineer
Cybersecurity Colorado Springs , Colorado Direct Hire Oct 28, 2026

Principal Software Cyber Engineer

Salary: $100,000 - $117,000| Location: Colorado Springs, CO| Active Top Secret Clearance Required

Caribou Thunder is seeking a Principal Software Cyber Engineer to serve as the software security and cybersecurity technical lead for a program developing and fielding a next-generation ground-based radar supporting Space Domain Awareness (SDA) missions. As a key member of the senior technical team, you will define, implement, document, and sustain secure software architectures and cybersecurity protections across mission systems, development environments, operational services, and long-term sustainment activities.

The ideal candidate combines strong software development expertise with practical cybersecurity experience, applying secure coding principles, vulnerability management, automated security testing, and systems engineering practices to protect mission-critical applications. You will work closely with software developers, systems engineers, cybersecurity personnel, and program stakeholders to translate security requirements into actionable engineering solutions while supporting software integrity, compliance, and operational readiness.

A Day in the Life – What you'll do

Lead the development and sustainment of secure software architectures and cybersecurity protections for mission software and supporting services within a ground-based radar system.
Design, develop, document, test, debug, and maintain software applications and system components using languages and frameworks such as Java, Python, JavaScript, C, C++, and Spring.
Collaborate with software developers, systems engineers, hardware engineers, and cybersecurity teams to integrate security requirements throughout the software development lifecycle.
Review source code, identify potential vulnerabilities, investigate defects, and implement secure coding practices to reduce software security risks.
Analyze static and dynamic application security testing results, distinguish actionable findings from false positives or non-applicable results, and develop technical justifications and remediation plans.
Develop and maintain Plans of Action and Milestones (POA&Ms) to track security findings, corrective actions, remediation progress, and residual risks.
Integrate security tools, automated checks, and security gates into Continuous Integration and Continuous Delivery (CI/CD) pipelines to support secure software builds and releases.
Translate cybersecurity policies, technical standards, and security requirements into developer-facing tasks, implementation guidance, and verifiable acceptance criteria.
Support software configuration management, source control, branching strategies, code reviews, and controlled release processes across cross-functional Agile teams.
Assess software dependencies, third-party components, software supply chain risks, and Software Bills of Materials (SBOMs) to support software integrity and supply chain security.
Apply applicable cybersecurity frameworks, including NIST SP 800-53 and the Risk Management Framework (RMF), along with relevant DISA Application Security and Development Security Technical Implementation Guide (STIG) requirements.
Evaluate and remediate software vulnerabilities across Linux environments, with emphasis on Red Hat Enterprise Linux (RHEL) and Ubuntu.
Support container security and orchestration hardening, including Docker and Kubernetes environments, image scanning, and vulnerability remediation.
Coordinate vulnerability lifecycle management, patching, security assessments, and corrective actions across software development and operational environments.
Help ensure mission software appropriately protects sensitive information, including personally identifiable information (PII), classified information, and export-controlled data.
Support cybersecurity compliance activities and, where applicable, cross-domain solution (CDS) transfer approval processes.
Provide technical leadership and guidance to engineering teams, promote secure development practices, and help resolve complex software and cybersecurity issues.

Required Qualifications

Demonstrated software development experience using one or more of the following programming languages: Java, Python, JavaScript, C, or C++.
Experience with the Spring Framework.
Experience debugging existing software, identifying root causes, and correcting software defects.
Familiarity with Agile software development methodologies and collaboration within cross-functional Scrum teams.
Experience analyzing static and dynamic security scan results, identifying actionable findings, evaluating false positives, and documenting technical justifications.
Experience developing remediation plans and tracking cybersecurity findings through POA&Ms or comparable vulnerability management processes.
Practical knowledge of secure coding practices and code review techniques for identifying common software vulnerabilities.
Understanding of CI/CD pipelines and the integration of automated security testing and security gates into software build and release processes.
Ability to interpret cybersecurity requirements and translate them into actionable development tasks, technical implementation guidance, and acceptance criteria.
Experience with version control systems and branching strategies in collaborative software development environments.
Experience working with multiple Linux distributions, particularly Red Hat Enterprise Linux (RHEL) and Ubuntu.
Strong technical problem-solving, written communication, and cross-functional collaboration skills.
Active U.S. Government Top Secret security clearance that is current and within scope at the time of application.

Preferred Qualifications

Experience overseeing software integrity and software supply chain security, including dependency management, SBOM generation or review, and third-party vendor assessments.
Familiarity with NIST SP 800-53, the Risk Management Framework (RMF), and DISA Application Security and Development STIG requirements.
Hands-on experience with Static Application Security Testing (SAST) tools such as SonarQube or Fortify.
Hands-on experience with Software Composition Analysis (SCA) tools such as Sonatype Nexus.
Relevant cybersecurity or secure software certifications, such as Security+, CISSP, or CSSLP.
Familiarity with container security, Docker, Kubernetes, orchestration hardening, and container image scanning tools.
Practical knowledge of vulnerability lifecycle management, security patching, and remediation processes across development and operational environments.
Understanding of data protection requirements and the secure handling of PII, classified information, and export-controlled data.
Experience supporting or obtaining low-to-high cross-domain solution (CDS) transfer approvals and navigating associated cybersecurity compliance workflows.
Experience providing technical leadership for secure software engineering or cybersecurity initiatives within complex, mission-critical systems.
Experience supporting radar, missile defense, space systems, Space Domain Awareness, or other national security mission systems.

Who is Caribou Thunder?

Caribou Thunder is a HUBZone-certified small business providing advanced technical and engineering services to the U.S. Department of War and its mission partners. 35+ states and 20+ countries. We've delivered trusted solutions for over two decades - strengthening national readiness across missions on land, undersea, in the air, and throughout LEO, MEO, GEO, and deep space.

Why Caribou Thunder?

TEAM THUNDER - Mission Focused. Delivery Proven. Ready to Serve.

Employee Advocacy Mission Proven Global Reach Skilled Teams Modern Tools Empowering Culture

Our engineers and innovators ensure capability from sea floor to space frontier - delivering on time, maintaining compliance, and performing with precision in high-consequence environments.

We specialize in Engineering Services, Cybersecurity, Software Development, Modeling & Simulation, Digital Engineering, and Artificial Intelligence - disciplines powering the nation’s most complex technical missions.

Employee Advocacy + Benefits

Our people are the heart of Caribou Thunder. We invest in their growth, flexibility, and well-being - knowing their success drives ours.