Security Software Engineer – Cloud & DoD Compliance

Eccalon, LLC; Detroit (MI); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Benefits package

Job summary

Eccalon is seeking a Security Software Engineer to build and harden software systems for DoD programs, enforcing CMMC/NIST 800-171 and FedRAMP across AWS GovCloud and Azure GCC High. You will embed security across the SDLC—from design and code review through CI/CD and cloud deployment—working with engineering, DevSecOps, and IT in a regulated, cloud-native environment.

You will design secure architectures, implement IAM and SSO flows, run SAST/DAST, lead vulnerability remediation, and mentor

Qualifications

• Bachelor’s degree in Computer Science, Engineering, or related field—or equivalent experience.
• 3+ years of software engineering experience with a strong focus on security.
• Proficiency in one or more programming languages (e.g., JavaScript/TypeScript, Python, Go, C#).
• Experience with secure coding practices and frameworks.
• Strong understanding of application security principles, including OWASP Top 10, Secure API/REST design, Cryptography fundamentals, and auth patterns.
• Experience with code scanning tools (SAST/DAST), threat modeling, and penetration testing.
• Familiarity with NIST 800-171, CMMC, or FedRAMP security control requirements and evidence collection.
• Hands-on experience with AWS and/or Azure security services (IAM, WAF, Security Hub, Defender, Sentinel); GCC High or GovCloud experience a plus.

Responsibilities

• Core Engineering & Secure Development: Design and develop secure software with a security-first mindset across the SDLC.
• Security Architecture & Controls: Design secure system and API architectures for multi-tenant cloud environments and implement IAM, SSO flows.
• Vulnerability Management & Response: Lead code reviews, SAST/DAST scans, and targeted penetration testing; remediate vulnerabilities within POA&M timelines.
• Cross-functional Collaboration: Serve as the embedded security champion for engineering squads; mentor and deliver security training.

Skills

Security engineering

Secure SDLC

SAST/DAST

Threat modeling

CI/CD security

AWS/Azure security

Education

Bachelor's degree in CS or related field

Tools

AWS

Azure

GCC High / GovCloud

CI/CD tooling

Job description

Eccalon is seeking a Security Software Engineer to build and harden software systems for DoD programs, enforcing CMMC/NIST 800-171 and FedRAMP across AWS GovCloud and Azure GCC High. You will embed security across the SDLC—from design and code review through CI/CD and cloud deployment—working with engineering, DevSecOps, and IT in a regulated, cloud-native environment.

You will design secure architectures, implement IAM and SSO flows, run SAST/DAST, lead vulnerability remediation, and mentor