TS/SCI Cybersecurity Engineer — App Security (Onsite, Richmond)

Cybersecurity Jobs; Richmond (VA); On-site; USD 140,000 - 170,000; Full time

Job summary

Data Systems Analysts, Inc. (DSA) is hiring a TS/SCI-cleared Cybersecurity Engineer (Application Security) to secure software for mission-critical systems in a secure DoD environment.

This onsite role owns software security across the application lifecycle, from testing and code review to integrating security tools and RMF/ATO evidence. Located in Richmond, VA onsite, the role collaborates with engineering and compliance to translate requirements into practical security controls and ensure

Qualifications

• BS degree in Computer Science, Software Engineering, or related field; experience may substitute.
• TS/SCI Clearance.
• CompTIA Security+ (DoD 8140 compliant).
• Minimum 5 years in software development, application security, or secure software assessment.
• Hands-on development in Python, Java, C#, Go, or JavaScript; knowledge of back-end services, APIs, databases.
• Experience finding and validating software vulnerabilities via code review or testing.
• Familiarity with OWASP Top 10 and CWE; ability to communicate fixes clearly.

Responsibilities

• Own software security within the cyber engineering team across the application lifecycle.
• Perform security testing and validate remediations.
• Review code against secure coding standards to identify vulnerabilities.
• Implement, tune, and maintain security tools (SAST, DAST, dependencies, container scanning).
• Evaluate open-source and commercial tools for security fit and risk.
• Collaborate with engineers, admins, architects, ISSOs/ISSMs to define security requirements.

Skills

Software security

Application security

Secure coding

Threat modeling

SAST

DAST

CI/CD integration

RMF/ATO knowledge

MITRE ATT&CK

OWASP Top 10

Education

BS in Computer Science / related field

Tools

Fortify

SonarQube

Checkmarx

Burp Suite

OWASP ZAP

GitLab

Jenkins

AWS/GovCloud

SBOMs

RMF

NIST SP 800-53

eMASS

DISA STIG

Job description

Data Systems Analysts, Inc. (DSA) is hiring a TS/SCI-cleared Cybersecurity Engineer (Application Security) to secure software for mission-critical systems in a secure DoD environment.

This onsite role owns software security across the application lifecycle, from testing and code review to integrating security tools and RMF/ATO evidence. Located in Richmond, VA onsite, the role collaborates with engineering and compliance to translate requirements into practical security controls and ensure