Senior Software Security Engineer

Interon IT Solutions; Chantilly (VA); Remote; USD 150,000 - 190,000; Full time

Job summary

Interon IT Solutions is seeking a Senior Software Security Engineer to assess third-party Windows desktop applications requested by employees and ensure compliance with internal security standards.

The role involves reverse engineering Windows binaries, analyzing network traffic, and communicating risks and remediation options to engineering teams while supporting business objectives. Remote work with Eastern Time hours is offered.

Qualifications

• Strong knowledge of Microsoft Windows, desktop app conventions, and AD in enterprise networks.
• Hands-on experience with Windows binary reverse engineering and security analysis.
• Proficiency in network protocol analysis, packet inspection, and decryption.
• Ability to interpret internal security policies and apply them to software reviews.
• Working knowledge of Linux and strong cross-functional communication.

Responsibilities

• Perform security reviews of third-party Windows applications and validate compliance with internal standards.
• Reverse engineer and debug Windows binaries to identify vulnerabilities and unsafe behavior.
• Analyze network protocols, use packet capture and decryption to validate behavior.
• Apply penetration testing techniques and select tools for each application review.
• Identify weaknesses, document findings, and define security conditions for approval.

Skills

Windows security

Reverse engineering

Network protocol analysis

Policy interpretation

Linux knowledge

Communication across teams

Job description

Job Title: Senior Software Security Engineer Must have 10+ yrs of experience

Location — 100% remote, working Eastern Time hours

Work authorization — U.S. citizens and green card holders only W2 only no C2C

Role Overview Our client is seeking a Senior Software Security Engineer to assess third-party Windows desktop applications requested by employees. You will review application behavior, reverse engineer Windows binaries, and analyze network traffic to determine whether software meets internal security standards. This includes identifying unauthorized outbound connections and other activity that may violate firm policy. You will work closely with the senior security reviewer, Windows Platform Engineering, Frontline Support, and employees requesting software. The role requires practical judgment in defining approval conditions and proposing workarounds that address security risks while meeting business needs.

Responsibilities

• Perform security reviews of third-party, non-SaaS Windows applications and validate compliance with internal security standards.
• Reverse engineer and debug Windows binaries to identify vulnerabilities, unsafe behavior, and potential avenues for exploitation.
• Analyze application network protocols and use packet capture, traffic interception, decryption, and packet modification to validate application behavior.
• Apply penetration testing techniques and select tools suited to each application and review.
• Identify common desktop application weaknesses, document findings, and define security conditions for approval where appropriate.
• Communicate risks, remediation options, and practical workarounds to engineering, support, and business users.
• Keep requestors informed throughout the software review process.

Required Qualifications

• Strong knowledge of Microsoft Windows, desktop application conventions, and enterprise endpoint infrastructure, including Active Directory.
• Hands‑on experience with Windows binary reverse engineering, debugging, and software security analysis.
• Proficiency in network protocol analysis, packet inspection, traffic interception, and decryption.
• Ability to interpret internal security policies and apply them to software review decisions.
• Working knowledge of Linux and strong communication skills across technical and business teams.

Preferred Qualifications

• Capture‑the‑Flag (CTF) competition experience.
• Background in network or systems administration.

Certifications are optional. Selection is based on demonstrated hands‑on experience.