SECURE SOFTWARE ASSESSOR (CYBER-NGA)

Quantum Research International; Springfield (VA); On-site; USD 110,000 - 150,000; Full time

Job summary

Quantum Research International, Inc. is seeking a motivated Secure Software Assessor to join the NGA DEFENDER Cybersecurity Software Assurance team at NGA Campus East in Springfield, VA. You will evaluate software security risks across the Software Development Life Cycle.

Responsibilities include applying the NGA SWAP process, coordinating with engineering, and performing static code analysis. TS/SCI with CI Polygraph, a bachelor’s degree (or Sec+/CSSLP/GSEC in lieu), and Open-Source research

Qualifications

• TS/SCI eligible, CI Polygraph.
• Bachelor’s degree; in lieu, Sec+, CSSLP, or GSEC accepted.
• Experience with CND Intelligence Analysis, Assessments, and/or Open-Source Research.
• Knowledge of government data security standards and handling of classified information.
• Knowledge of computer networking concepts, protocols, and network security.
• Understanding of the software development lifecycle.

Responsibilities

• Apply NGA SWAP process for software requests.
• Capture security controls during requirements phase.
• Consult with engineering to evaluate hardware/software interfaces.
• Evaluate hardware configuration considering costs and security.
• Identify basic coding flaws and security implications.
• Address security needs within time and cost constraints.
• Coordinate with development teams on custom code requests.
• Perform NGA static code analysis processes.

Skills

CND Intelligence Analysis

Open-Source Research

Software Security Concepts

Security Documentation / Risk

Education

Bachelor’s degree or Sec+/CSSLP/GSEC

Tools

Fortify

GitLab

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

SECURE SOFTWARE ASSESSOR (CYBER-NGA)

INTEL COMMUNITY Full Time SPRINGFIELD, VA, Springfield, VA, US

3 days ago Requisition ID: 1485

Overview:
Quantum Research International, Inc . (Quantum) provides our national defense and federal civilian and industry customers with services and products in the following main areas: 1) Cybersecurity and Information Operations; 2) Space Operations and Control; 3) Aviation Systems; 4) Ground, Air and Missile Defense, and Fires Support Systems; 5) Intelligence Programs Support; 6) Experimentation and Test; 7) Program Management; and (8) Audio/Visual Technology Applications. Quantum's Corporate Office is located in Huntsville, AL, but Quantum actively hires for positions nationwide and internationally. We pride ourselves on providing high quality support to the U.S. Government and our Nation's Warfighters. In addition to our corporate office, we have physical locations in Aberdeen, MD; Colorado Springs, CO; Crestview, FL; Orlando, FL; and Tupelo, MS. .

Mission:

Quantum Research Intl is seeking a motivated and skilled intermediate Secure Software Assessor. As a member of the NGA DEFENDER Cybersecurity Software Assurance team, the contractor helps to determine the risk of using commercial, government, and open-source software within NGA and employs software code analysis techniques to mitigate risk during Software Development Life Cycles (SDLC). The Secure Software Assessor analyzes the security of new or existing computer applications, software, or specialized utility programs on or preparing to deploy on NGA systems and provides actionable results. This position is available immediately at NGA Campus East in Springfield, VA.

Responsibilities:

• Apply the automated enterprise NGA Software Assurance Process (SWAP) process for submission and adjudication of NGA software requests.
• Capture security controls used during the requirements phase to integrate security within the process, to identify key security objectives, and to maximize software security while minimizing disruption to plans and schedules.
• Consult with engineering staff to evaluate interface between hardware and software.
• Evaluate factors such as reporting formats required, cost constraints, and need for security restrictions to determine hardware configuration.
• Identify basic common coding flaws at a high level, identify security implications, and apply methodologies within centralized and decentralized environments across the enterprise's computer systems in software development.
• Identify security issues around steady state operation and management of software and incorporate security measures that must be taken when a product reaches its end of life.
• Analyze security needs and software requirements to determine feasibility of design within time and cost constraints and security mandates.
• Coordinate with software development teams on custom code requests and perform NGA's static code analysis process.

Requirements:

• TS/SCI eligible, subject to CI Polygraph
• Bachelor’s degree. In lieu of degree, Sec+, CSSLP, or GSEC may be accepted.
• Experience with Computer Network Defense (CND) Intelligence Analysis, Assessments, and/or Open-Source Research.
• Knowledge of Government standards for data security such as markings, handling of classified and unclassified information, and how to handle the distribution of this information.
• Knowledge of computer networking concepts and protocols, and network security methodologies, as well as risk management processes (e.g., methods for assessing and mitigating risk).
• Understands basic system and application security threats and vulnerabilities.
• Familiar with the software development lifecycle.

Desired/Preferred Skills

• Experience/Familiar with static code analysis using tools such as Fortify, GitLab, etc.
• Familiar with secure software deployment methodologies (agile, waterfall, devops, etc), tools, and practices.
• Ability to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means.

Equal Opportunity Employer/Affirmative Action Employer M/F/D/V: All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, sexual orientation, gender identity, or any other characteristic protected by law. *Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.