Senior Software Assurance Engineer - Secure SDLC Expert

COLSA; Huntsville (AL); On-site; USD 110,000 - 160,000; Full time

Job summary

COLSA Corporation in Huntsville, Alabama, seeks an experienced Software Assurance Engineer to join our security-focused team. You will analyze complex software, identify vulnerabilities, and support SDLC security across materiel release.

You will perform SAST/DAST/IAST testing, vulnerability remediation, and coordinate with software engineers and program offices to ensure compliant, secure solutions. A Secret clearance is required, with potential for Top Secret as needed.

Qualifications

• Bachelors’ degree in Computer Science, Software Engineering, Cybersecurity, Information Systems, Engineering, or a related field (or equivalent experience).
• Minimum of 8 years of related experience.
• Experience integrating security practices throughout the Software Development Lifecycle (SDLC).
• Experience supporting software assessments, authorization, or materiel release activities.
• Hands-on experience performing application security testing, such as SAST, DAST, IAST, fuzzing, and/or penetration testing.
• Ability to obtain and maintain a Secret Security Clearance prior to start; and willing and able to obtain a Top Secret clearance, if required by the customer
• US Citizenship required

Responsibilities

• Conducts Application Security Testing: Plans and executes investigations and tests of considerable complexity, including SAST, DAST, IAST, fuzzing, and penetration testing.
• Vulnerability Analysis & Remediation: Analyzes source code and binaries to identify security flaws and map to CWEs/CVEs.
• Advanced Problem Solving: Develops advanced methods and research techniques for complex security problems.
• Project Coordination: Coordinates efforts of software engineers and staff to ensure security is integrated in the SDLC.
• Materiel Release Support: Ensures software meets safety and security standards for materiel release.
• Technical Review: Verifies remediation effectiveness and compliance with security practices.
• Tool & Vendor Evaluation: Evaluates SwA tools (Fortify, Coverity, Semgrep, etc.) for testing needs.
• Industry Research: Reviews literature and threat landscapes relevant to projects.
• Technical Leadership: Provides guidance on secure coding practices to teams.

Skills

SAST

DAST

IAST

Fuzzing

Penetration testing

Vulnerability analysis

SDLC security

Technical leadership

Security architecture

Education

Bachelor's degree in CS/Software Eng/Cybersecurity

Tools

Fortify

Coverity

Semgrep

Cppcheck

Job description

COLSA Corporation in Huntsville, Alabama, seeks an experienced Software Assurance Engineer to join our security-focused team. You will analyze complex software, identify vulnerabilities, and support SDLC security across materiel release.

You will perform SAST/DAST/IAST testing, vulnerability remediation, and coordinate with software engineers and program offices to ensure compliant, secure solutions. A Secret clearance is required, with potential for Top Secret as needed.