TS/SCI App Security Engineer – Onsite Charlottesville

Data Systems Analysts, Inc.; Charlottesville (VA); On-site; USD 140,000 - 170,000; Full time

Job summary

Data Systems Analysts, Inc. (DSA) seeks a TS/SCI-cleared Cybersecurity Engineer focused on application security to secure software for DoD mission systems at NGIC in Charlottesville, VA.

You will own software security within the cyber engineering team, review code, perform security testing, and ensure the right tools and processes are in place. The role requires collaborating with engineers, ISSOs, and ISSMs, applying adversary techniques and RMF/ATO practices, and integrating security checks

Qualifications

• BS in Computer Science, Software Engineering, or related field.
• Experience with security testing and code review.
• Knowledge of OWASP Top 10, CWE and secure coding practices.

Responsibilities

• Own software security within the cyber engineering team.
• Perform security testing of applications and validate fixes.
• Review source code against secure coding standards.
• Implement and maintain SAST/DAST and software security tools.
• Integrate security checks into CI/CD pipelines (GitLab, Jenkins).
• Communicate risks and fixes to engineers and leadership.

Skills

Software development

Application security

Penetration testing

Threat modeling

Education

BS in Computer Science

CompTIA Security+ (DoD 8140)

Tools

Fortify

SonarQube

Checkmarx

Burp Suite

OWASP ZAP

Job description

Data Systems Analysts, Inc. (DSA) seeks a TS/SCI-cleared Cybersecurity Engineer focused on application security to secure software for DoD mission systems at NGIC in Charlottesville, VA.

You will own software security within the cyber engineering team, review code, perform security testing, and ensure the right tools and processes are in place. The role requires collaborating with engineers, ISSOs, and ISSMs, applying adversary techniques and RMF/ATO practices, and integrating security checks