Software Security Engineer - DevSecOps, SME

Navstar; Chantilly (VA); Presencial; USD 190 000 - 240 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health coverage

401K plan with company match

Paid PTO and holidays

Professional development assistance

Employer-paid disability & life保险

Resumo da oferta

Navstar in Chantilly, VA is seeking an experienced Software Security Engineer to design, develop, and implement secure software solutions supporting an enterprise AWS migration. This hands-on role combines production software development with cybersecurity engineering, secure coding, vulnerability remediation, and embedding security into cloud infrastructure, containers, and deployment pipelines.

You will work 100% onsite with up to 25% CONUS travel, collaborating with DevOps, cloud architects,

Qualificações

• Active TS/SCI security clearance required.
• 10+ years of software engineering, application security, cybersecurity engineering, or DevSecOps experience.
• Expert-level software development with Python, Java, and Go.
• Deep knowledge of secure coding, vulnerabilities, and cybersecurity engineering.
• Experience translating security requirements into automated controls.
• Hands-on AWS cloud experience with containers and CI/CD pipelines.
• Strong understanding of authentication, encryption, and secrets management.
• Familiarity with NIST/OWASP frameworks and secure SDLC practices.
• Independently diagnose vulnerabilities and deliver code-based solutions.
• Onsite work in Sterling, VA with up to 25% CONUS travel.

Responsabilidades

• Write, test, review, and maintain secure, production-quality software.
• Design software that implements cybersecurity controls in applications, APIs, and cloud services.
• Translate security policies and vulnerability findings into actionable code.
• Develop secure applications and automation using Python, Java, Go, or similar languages.
• Identify and remediate vulnerabilities via secure coding, reviews, and testing.
• Integrate automated security controls, scanning, and policy enforcement into CI/CD pipelines.
• Implement secure authentication, authorization, encryption, and IAM controls.
• Engineer security solutions for AWS, EKS, Kubernetes, and containerized apps.
• Develop reusable security automation, IaC, and policy-as-code solutions.
• Collaborate across software, cloud, and DevOps teams to embed cybersecurity in SDLC.
• Troubleshoot complex security issues across code, cloud, containers, and pipelines.
• Serve as a technical SME for secure software development and security engineering.

Conhecimentos

Python

Java

Go

Secure coding

CI/CD pipelines

Security engineering

Formação académica

Associate degree in CS/IT/Cybersecurity

Ferramentas

AWS

Docker

Kubernetes

Terraform

Helm

IaC

Descrição da oferta de emprego

Software Security Engineer - DevSecOps, SME Location Chantilly, VA Required Clearance Level TS/SCI

Would you like to perform rewarding work while contributing to the success of an established, growing company? Navstar is an award-winning organization that has a proven track record of successfully providing IT services and solutions both as a prime and sub-contractor on mission-focused IT programs. Our employees are integral players in support of mission-critical programs focused on our National Security.

Role Description:

Navstar is seeking an experienced, hands-on Software Security Engineer to design, develop, and implement secure software solutions supporting an enterprise AWS cloud migration and modernization initiative.

This is a working software engineering role requiring deep cybersecurity expertise and a strong emphasis on writing, testing, reviewing, and maintaining secure code. The selected candidate will translate cybersecurity policies, security requirements, and technical controls into functional software, automated security solutions, and secure development practices.

The ideal candidate combines SME-level software engineering capabilities with advanced cybersecurity knowledge. They must be equally comfortable developing production-quality software, identifying and remediating vulnerabilities, and engineering security directly into applications, cloud infrastructure, and deployment workflows.

Position Responsibilities

Write, test, review, and maintain secure, production-quality software aligned with enterprise cybersecurity policies and technical security requirements.

Design and develop software solutions that implement cybersecurity controls directly into applications, APIs, and cloud services.

Translate security policies, compliance requirements, and vulnerability findings into actionable, code-based solutions.

Develop secure applications and automation using Python, Java, Go, or comparable programming languages.

Identify, analyze, and remediate software vulnerabilities through secure coding, code reviews, and security testing.

Build and integrate automated security controls, vulnerability scanning, and policy enforcement into CI/CD pipelines.

Implement secure authentication, authorization, encryption, secrets management, and identity and access controls.

Engineer security solutions supporting AWS, Amazon EKS, Kubernetes, and containerized application environments.

Develop reusable security automation, Infrastructure as Code, and policy-as-code solutions.

Collaborate with software developers, cloud architects, and DevOps engineers to embed cybersecurity requirements throughout the software development lifecycle.

Troubleshoot complex security issues across application code, cloud infrastructure, containers, and deployment pipelines.

Serve as a technical SME for secure software development, application security architecture, and cybersecurity engineering while remaining directly responsible for implementation and delivery.

Required Skills and Qualifications:

• To be eligible for this position you must hold an active TS/SCI.

Active TS/SCI U.S. Security Clearance.

10+ years of relevant experience in software engineering, application security, cybersecurity engineering, or DevSecOps.

Associate degree or higher in Computer Science, Software Engineering, Cybersecurity, IT, or a related technical field.

Expert-level hands-on software development experience with Python, Java, Go, or comparable programming languages.

Demonstrated experience designing, writing, testing, and maintaining secure production-quality software.

Deep understanding of application security, secure coding practices, software vulnerabilities, and cybersecurity engineering principles.

Experience translating cybersecurity requirements and security policies into functional code and automated technical controls.

Hands-on experience developing or securing applications within AWS cloud environments.

Practical experience with Docker, Kubernetes, CI/CD pipelines, and Infrastructure as Code.

Experience implementing application security testing, vulnerability remediation, and automated security enforcement.

Strong understanding of authentication, authorization, encryption, identity management, API security, and secrets management.

Working knowledge of NIST security frameworks, OWASP, and secure software development standards.

Proven ability to independently diagnose security vulnerabilities and develop code-based solutions.

Ability to work 100% onsite in Sterling, VA, with up to 25% CONUS travel.

Desired Skills and Qualifications:

Experience securing enterprise AWS cloud migrations and modernization initiatives.

Experience with Amazon EKS, Terraform, Helm, and Kubernetes security.

Experience implementing DevSecOps automation, SAST/DAST, dependency scanning, and policy-as-code.

Familiarity with NIST SP 800-53, NIST SSDF, FedRAMP, and zero-trust security principles.

Experience developing security automation using AWS IAM, KMS, Secrets Manager, CloudTrail, and related services.

Experience with software supply chain security, container security, and secure CI/CD architectures.

Experience supporting platforms in restricted or disconnected environments.

AWS, CSSLP, CISSP, or other relevant cybersecurity certifications.

Previous experience supporting IC or DoD programs and greenfield development efforts.

Pay Rate:

In compliance with Virginia's Equal Pay for Equal Work law, the annual base salary range for this position is $190,000 - $240,000. This range represents the base pay for this role and is provided in accordance with Maryland’s requirements to disclose compensation in job postings. Please note that actual compensation may vary based on factors such as (but not limited to) the scope and responsibilities of the role, the candidate’s qualifications, experience, education, skills, internal equity, and market conditions. In addition to base salary, candidates hired into this position may be eligible for a hiring bonus of $10,000.00, subject to applicable contingencies and Navstar policy.

About Navstar

For 20 years Navstar has provided high-quality Innovative Technology Services and Solutions throughout the Intelligence Community. We would not have achieved the success we have without the best AllStar team; this is not just a place to work, Navstar is a community. At Navstar everything we do revolves around listening to both our customers and employees, delivering the results they expect, and being a trusted partner as both a prime and subcontractor. We have a proven track record of successfully providing innovative technology services and solutions on highly mission-focused programs; all while enjoying what we do at the same time. Security is our priority; together, we will make the nation a safer place.

Benefits at Navstar

• Highly Competitive Health Care Premiums, including 100% employer paid for employee
• Flexible Spending Accounts for Medical and Dependent Care
• Generous PTO and Federal Holiday Paid Leave
• Employer Paid STD/LTD
• Employer Paid Life Insurance
• 401K plan and Employer Match
• Referral and Opportunity Referral Programs
• Professional Development Assistance

EOE/M/F/Vet/Disabled

Navstar, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, age, religious beliefs, national origin, disability, U.S. veteran status, or any other legally protected characteristics under federal, state or local law.

EOE/M/F/Vet/Disabled

Navstar Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, age, religious beliefs, national origin, disability, U.S. veteran status, or any other legally protected characteristics under federal, state or local law.