Secure Software Assessor – NGA Cyber Defense

Quantum Research International Inc; Springfield (VA); On-site; USD 110,000 - 160,000; Full time

Job summary

Quantum Research International, Inc. seeks a motivated intermediate Secure Software Assessor to join the NGA DEFENDER Cybersecurity Software Assurance team at NGA Campus East in Springfield, VA.

You will analyze software security for new or existing applications, provide actionable results, and help mitigate risk across SDLC. The role requires TS/SCI eligibility with CI polygraph, a degree (or security certs in lieu), and experience in CND intelligence, assessments, and open-source research.

Qualifications

• TS/SCI eligible, subject to CI Polygraph.
• Bachelor's degree; in lieu of degree, security certs may be accepted.
• Experience with Computer Network Defense (CND) Intelligence Analysis, Assessments, and/or Open-Source Research.
• Knowledge of Government standards for data security such as markings, handling of classified and unclassified information.
• Knowledge of computer networking concepts, protocols, and network security methodologies, as well as risk management processes.
• Understands basic system and application security threats and vulnerabilities.

Responsibilities

• Apply the automated enterprise NGA Software Assurance Process (SWAP) process for submission and adjudication of NGA software requests.
• Capture security controls used during the requirements phase to integrate security within the process, to identify key security objectives, and to maximize software security while minimizing disruption to plans and schedules.
• Consult with engineering staff to evaluate interface between hardware and software.
• Evaluate factors such as reporting formats required, cost constraints, and need for security restrictions to determine hardware configuration.
• Identify basic common coding flaws at a high level, identify security implications, and apply methodologies within centralized and decentralized environments across the enterprise's computer systems in software development.
• Identify security issues around steady state operation and management of software and incorporate security measures that must be taken when a product reaches its end of life.

Skills

CND Intelligence Analysis

Open-Source Research

Software security concepts

Communication skills

SDLC security

Education

Bachelor's degree

Security certifications in lieu of degree (Sec+, CSSLP, or GSEC)

Tools

Fortify

GitLab

Job description

Quantum Research International, Inc. seeks a motivated intermediate Secure Software Assessor to join the NGA DEFENDER Cybersecurity Software Assurance team at NGA Campus East in Springfield, VA.

You will analyze software security for new or existing applications, provide actionable results, and help mitigate risk across SDLC. The role requires TS/SCI eligibility with CI polygraph, a degree (or security certs in lieu), and experience in CND intelligence, assessments, and open-source research.