Security Software Engineer - DoD-Ready, Cloud-Native

Eccalon, LLC; Detroit (MI); On-site; USD 110,000 - 170,000; Full time

Job summary

Eccalon, LLC is seeking a Security Software Engineer to build and harden software systems supporting DoD programs. You will embed security across the SDLC—from design and code review through CI/CD and cloud deployment—working with engineering, DevSecOps, and IT teams in regulated, cloud-native environments (AWS GovCloud, Azure GCC High).

Responsibilities include secure software design, threat modelling, vulnerability management, and automated security gates in CI/CD pipelines.

Qualifications

• Bachelor's degree in CS, Engineering, or related field.
• 3+ years of software engineering experience with a security focus.
• Experience with secure coding practices and frameworks.
• Familiarity with NIST 800-171, CMMC, or FedRAMP security control requirements.

Responsibilities

• Design secure software with a security-first mindset across the SDLC.
• Apply secure coding standards, threat modelling, and vulnerability mitigation.
• Conduct architecture reviews and code hardening addressing OWASP Top 10 and DoD STIGs.
• Automate security gates in CI/CD pipelines (SAST, DAST, dependencies, secrets).
• Design secure multi-tenant cloud architectures and IAM controls.
• Lead code reviews, SAST/DAST scans, and vulnerability remediation.

Skills

Secure coding practices

Threat modelling

SAST/DAST

AWS/Azure security

Education

Bachelor's degree

Tools

SAST tools

DAST tools

IAM/SSO tools

Job description

Eccalon, LLC is seeking a Security Software Engineer to build and harden software systems supporting DoD programs. You will embed security across the SDLC—from design and code review through CI/CD and cloud deployment—working with engineering, DevSecOps, and IT teams in regulated, cloud-native environments (AWS GovCloud, Azure GCC High).

Responsibilities include secure software design, threat modelling, vulnerability management, and automated security gates in CI/CD pipelines.