Software Assurance Evaluation Engineer: Secure Code Analysis Expert

MANTECH; Hanover (MD); On-site; USD 150,000 - 190,000; Full time

Job summary

MANTECH seeks a motivated Software Assurance Evaluation Engineer to join our team in Hanover, MD, focusing on secure and reliable data dissemination through rigorous source code analysis. The role emphasizes evaluating automated SwA tools, performing code security assessments, and delivering vulnerability reports to leadership.

Responsibilities include developing test methodologies, triaging tool results, and collaborating with clients and developers to implement remediation strategies.

Qualifications

• 15+ years of professional experience in Systems Security Engineering, Software Programming, or Computer Science.
• Strong software analysis or development experience in C/C++ or C#, with ability to read/analyze Java.

Responsibilities

• Utilizing, fine-tuning, and evaluating automated SwA tools for specific customer environments to maximize detection and minimize false positives.
• Interpreting SwA tool results to detect vulnerabilities, triage findings, and drive secure coding practices across the development lifecycle.
• Developing and executing test methodologies, custom scoring criteria, and specific test cases to support and optimize SwA tool analysis.
• Performing software security assessments and interfacing with clients and developers to recommend remediation strategies for identified code vulnerabilities.
• Creating technical documentation, vulnerability test reports, and risk assessments for leadership.
• Researching and assessing emerging SwA tools and methodologies to enhance the team's software security analysis capabilities.

Skills

C/C++

C#

Java

Education

Bachelor's degree

Master's degree

Tools

Klocwork

CodeSonar

Fortify

CodePeer

IDA Pro

Fortran-Lint

Job description

MANTECH seeks a motivated Software Assurance Evaluation Engineer to join our team in Hanover, MD, focusing on secure and reliable data dissemination through rigorous source code analysis. The role emphasizes evaluating automated SwA tools, performing code security assessments, and delivering vulnerability reports to leadership.

Responsibilities include developing test methodologies, triaging tool results, and collaborating with clients and developers to implement remediation strategies.