Senior Software Assurance Engineer – SDLC Security Leader

Colsa-5; Huntsville (AL); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Life Insurance

Short-Term Disability

Long-Term Disability

AD&D

Income Protection

401(k)

Flexible Spending Accounts

EAP

Education Reimbursement

Employee Discount

PTO and Holidays

Job summary

COLSA Corporation is seeking an experienced Software Assurance (SwA) Engineer to join our team in Huntsville, Alabama. This role focuses on identifying vulnerabilities, conducting application security testing, and supporting readiness for materiel release throughout the SDLC.

The ideal candidate will have strong expertise in SAST/DAST/IAST, vulnerability analysis, and collaboration with software engineers to embed secure coding practices.

Qualifications

• Bachelor's degree in CS/SE/Cybersecurity or related field.
• Minimum 8 years of related experience.
• Experience integrating security practices across the SDLC.
• Ability to obtain and maintain security clearance.

Responsibilities

• Plans and executes investigations and tests (SAST/DAST/IAST) and penetration testing.
• Analyzes source code and binaries to identify security flaws and maps to CWEs/CVEs.
• Develops advanced methods for solving complex software security problems.
• Coordinates software engineers and support staff to secure the SDLC.
• Plans, conducts, and directs major phases for materiel release.

Skills

Application security

SDLC security

Vulnerability analysis

Technical leadership

Security testing (SAST/DAST/IAST)

Education

Bachelor's degree in CS/SE/Cybersecurity or related field

8+ years related experience

Tools

SAST tools

DAST tools

IAST tools

Fortify

Coverity

Semgrep

Cppcheck

Job description

COLSA Corporation is seeking an experienced Software Assurance (SwA) Engineer to join our team in Huntsville, Alabama. This role focuses on identifying vulnerabilities, conducting application security testing, and supporting readiness for materiel release throughout the SDLC.

The ideal candidate will have strong expertise in SAST/DAST/IAST, vulnerability analysis, and collaboration with software engineers to embed secure coding practices.