Senior Software Assurance Engineer

COLSA; Huntsville (AL); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Life Insurance

Short-Term Disability

Long-Term Disability

401(k) with company match

Paid Time Off

Job summary

COLSA Corporation in Huntsville, Alabama seeks an experienced Software Assurance Engineer to bolster the security of complex software throughout the SDLC. You will identify vulnerabilities, conduct security testing, and support readiness for materiel release.

On-site 100% with US citizenship and Secret (potential Top Secret) clearance requirements. The role demands hands-on security testing (SAST/DAST/IAST), vulnerability analysis, and collaboration with engineers to integrate security

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Information Systems, Engineering, or related field.
• Minimum of 8 years of related experience.
• Experience integrating security practices throughout the Software Development Lifecycle (SDLC).
• Experience supporting software assessments, authorization, or materiel release activities.
• Hands-on experience performing application security testing, such as SAST, DAST, IAST, fuzzing, and/or penetration testing.
• Ability to obtain and maintain a Secret Security Clearance prior to start; and willing and able to obtain a Top Secret clearance, if required by the customer
• US Citizenship required

Responsibilities

• Conducts Application Security Testing: Plans and executes investigations and tests of considerable complexity, including SAST, DAST, IAST, fuzzing, and penetration testing.
• Vulnerability Analysis & Remediation: Analyzes source code and compiled binaries to identify security flaws, mapping findings to CWEs and CVEs.
• Advanced Problem Solving: Develops and applies advanced methods, theories, and research techniques in the investigation and solution of complex and advanced software security problems.
• Project Coordination: Coordinates efforts of software engineers, development teams, and technical support staff in the performance of assigned SwA projects, ensuring security is integrated throughout the SDLC.
• Materiel Release Support: Plans, conducts, and technically directs major phases of significant SwA projects to ensure software meets safety and security standards for materiel release.
• Technical Review: Reviews the completion and implementation of technical products, ensuring vulnerability remediations are effective and compliant with current security practices.
• Tool & Vendor Evaluation: May evaluate vendor capabilities and SwA tools (Fortify, Coverity, Semgrep, Cppcheck) to provide required security testing products.
• Industry Research: Reviews literature, patents, and current practices relevant to solution of application security projects.
• Technical Leadership: May provide technical consultation to other organizations regarding secure coding practices.

Skills

Security testing

Vulnerability analysis

Threat modeling

Team coordination

Communication skills

Education

Bachelor's degree in Computer Science or related field

Tools

Fortify

Coverity

Semgrep

Cppcheck

Job description

COLSA Corporation in Huntsville, Alabama seeks an experienced Software Assurance Engineer to bolster the security of complex software throughout the SDLC. You will identify vulnerabilities, conduct security testing, and support readiness for materiel release.

On-site 100% with US citizenship and Secret (potential Top Secret) clearance requirements. The role demands hands-on security testing (SAST/DAST/IAST), vulnerability analysis, and collaboration with engineers to integrate security