Senior Cybersecurity Engineer – Software Assurance

JobCubby; New Bedford (MA); On-site; USD 129,000 - 194,000; Full time

Benefits offered by this job

Top security culture

On-site work in MA

Job summary

MITRE seeks a seasoned software assurance engineer to advance secure coding practices and DevSecOps integration. You will collaborate with researchers to analyze software weaknesses, leverage AI for security enhancements, and help strengthen sponsor environments through secure solutions.

Applicants should have 5+ years of related experience, a degree in CS or cybersecurity, and the ability to obtain a security clearance. On-site presence in Massachusetts is required.

Qualifications

• Experience in secure application development and software assurance.
• Knowledge of SAST/DAST testing.
• Proven collaboration with multi-disciplinary teams.
• Ability to obtain U.S. security clearance (Top Secret not required at hire).
• Understanding of CWE, CVE, CWE prioritization methods.

Responsibilities

• Provide thought leadership in Software Assurance within MITRE and for sponsors.
• Assist sponsors in implementing secure development practices.
• Research novel software/hardware weaknesses and attack patterns.
• Expand CWE program content and impact.
• Perform static analysis on source code for diverse use cases.
• Investigate AI-driven improvements to software assurance techniques.
• Prototype SBOM management systems.
• Contribute to related research projects with team input.

Skills

Security testing

Collaborative

Strong written/verbal communication

Analytical thinking

Ability to obtain TS clearance

Education

Bachelor’s degree (CS/SE/Cybersecurity)

Master’s or PhD eligible

Tools

Python

C

C++

C#

Rust

Go

Job description

At MITRE, your passion fuels work that impacts our nation and improves lives. This is where your skills strengthen national security, cybersecurity, health, transportation, and citizen services. We’re a nonprofit engineering, applied research, and advanced technology organization working in the public interest. With objectivity and integrity at our core, we lead federally funded research and development centers for U.S. government agencies – collaborating with industry and academia to deliver integrated, high-impact solutions that advance our nation’s health, security, and prosperity. Our people tackle the toughest technical challenges, supported by competitive benefits, meaningful career development, and a culture of innovation, collaboration, and technical excellence. Choose MITRE for a career with purpose — and help shape the future.

The Cryptography, ICAM, & System Assurance department is comprised of an inspired multi-disciplinary team of researchers and practitioners driving innovation in the department’s technical areas of focus, with particular emphasis in Cryptography; Software Assurance (SwA); and Identity, Credential and Access Management (ICAM). We develop and apply scalable approaches for systems and software, evaluate technology and solutions, lead and foster external partnerships within the communities we support, and conduct novel research and development.

We serve in critical roles including:

• Conceive of and advance novel technical ideas,
• Provide deep analyses whose results drive decision-making by our sponsors,
• Build proof-of-concept systems that leverage new technology and concepts, and
• Engage with the vendor community, academia, and our sponsors to raise the bar on cyber security throughout the industry.

Roles & Responsibilities

As a member of the Cryptography, ICAM, & System Assurance department in the Cyber Engineering Division, you will join an inspired team supporting developers and security researchers around the world. We are seeking a qualified candidate for a technical position involving the application of core capabilities in Software Assurance and Secure Coding, the implementation of these into modern DevSecOps processes, and the integration of AI technologies throughout this constantly changing domain. We are looking for an individual with the hard-to-find combination of hands‑on software development and application security practice. The successful candidate will directly contribute to the technical work for our sponsors and take an active role in overall team dynamics and eventual leadership. Expected responsibilities include:

• Providing thought leadership in Software Assurance both within MITRE and for our sponsors,
• Assisting sponsors in implementing Software Assurance best practices within their operational environments,
• Conducting research into novel software/hardware weaknesses and attack patterns,
• Increasing the impact of the CWE program by expanding and improving technical content,
• Performing static analysis on source code to support a range of use cases,
• Researching ways to improve traditional SwA techniques by leveraging the newest AI technologies,
• Implementing prototype systems to manage Software Bill of Materials (SBOMs), and
• Helping to advance related research projects, bringing your unique knowledge to bear.

Basic Qualifications

• A minimum of 5 years of related experience with a bachelor’s degree; or 3 years and a master’s degree; or a PhD with relevant experience who can immediately contribute at this job step; or equivalent combination of related education and work experience.
• Experience in secure application development and software assurance
• Knowledgeable about static and dynamic application security testing (SAST/DAST)
• Demonstrated experience collaborating successfully with teams
• Demonstrated examples of building and leveraging relationships that had a positive impact on the work
• Track record of impactful work that made a difference
• Strong analytical and problem-solving skills and proactive, critical thinking skills
• Excellent written/verbal communications skills
• This position requires the ability to obtain a top secret clearance
• Per the U.S. Government’s eligibility requirements for a clearance, U.S. Citizenship is required.
• This position requires a minimum of 3 days a week on-site.

Preferred Qualifications

• Bachelor’s degree in computer science, Software Engineering, Cyber Security, or related technical field of study
• Previous experience as a software or cyber security engineer
• Familiarity with cyber security principles, concepts and technologies
• Working knowledge of standards for describing and prioritizing vulnerabilities and weaknesses (i.e., CVE, CVSS, CWE)
• Deep technical understanding of one or more software analysis areas (e.g., static code analysis, symbolic execution, or binary analysis)
• Familiarity with Python, C, C++, C#, Rust, GoLang and other current development languages
• Prior involvement in performing software/hardware design, architecture, and/or code reviews
• Ability to possess and maintain a DoD Top Secret clearance

This requisition requires the candidate to have a minimum of the following clearance(s): Secret

This requisition requires the hired candidate to have or obtain, within one year from the date of hire, the following clearance(s): Secret

Salary compensation range and midpoint

$129,200 - $161,500 - $193,800 Annual

Work Location Type

Onsite

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local or international law.

MITRE intends to maintain a website that is fully accessible to all individuals. If you are unable to search or apply for jobs and would like to request a reasonable accommodation for any part of MITRE’s employment process, please email [e-mail] for general support and [e-mail] for intern positions. This service is for individuals requiring reasonable accommodation requests. Please note that vendor solicitations will not receive a reply.

Benefits information may be found here.