Software Security Engineer - TS/SCI | DoD Apps

Cybersecurity Jobs; Norfolk (VA); On-site; USD 140,000 - 170,000; Full time

Job summary

Data Systems Analysts, Inc. in Charlottesville, VA seeks a TS/SCI-cleared Cybersecurity Engineer focused on application and software security for an onsite role at NGIC.

The engineer will secure software supporting DoD systems through testing, code review, vulnerability validation, and tool integration. The role owns software security, provides guidance for securing apps and APIs, applies adversary techniques and threat modeling, and supports RMF/ATO activities with clear documentation and

Qualifications

• BS degree in Computer Science, Software Engineering, Cybersecurity, or related field; experience may substitute.
• TS/SCI Clearance required.
• Minimum 5 years of combined experience in software development, application security, or secure software assessment.
• Hands-on development experience in Python, Java, C#, Go, or JavaScript with back-end APIs and databases.
• Knowledge of OWASP Top 10, CWE, exploitability, and remediation.

Responsibilities

• Own software security for the cyber engineering team and guide securing applications, APIs, and back-end services.
• Perform security testing of applications and validate fixes resolve findings.
• Review source code against secure coding standards to identify vulnerabilities.
• Implement, tune, and maintain SAST, DAST, dependency scanning, and container scanning tools.
• Evaluate security tools and source code for risk and fit for mission.

Skills

Software security

Adversary techniques (MITRE ATT&CK)

Secure coding practices

Back-end APIs & databases

Education

BS degree in Computer Science or related field

Tools

Fortify

SonarQube

Checkmarx

Burp Suite

OWASP ZAP

GitLab

Jenkins

Oracle

PostgreSQL

AWS/GovCloud

Job description

Data Systems Analysts, Inc. in Charlottesville, VA seeks a TS/SCI-cleared Cybersecurity Engineer focused on application and software security for an onsite role at NGIC.

The engineer will secure software supporting DoD systems through testing, code review, vulnerability validation, and tool integration. The role owns software security, provides guidance for securing apps and APIs, applies adversary techniques and threat modeling, and supports RMF/ATO activities with clear documentation and