TS/SCI Software Security Engineer: Code Review & Secure Coding

CO1002 CDW Government, LLC; Washington (District of Columbia, VA); On-site; USD 190,000 - 230,000; Full time

Job summary

CDW is seeking a cleared Software Security Engineer to perform hands‑on code reviews, assess security against government standards, and translate requirements into actionable guidance for developers. You will validate SAST/DAST/SCA findings, evaluate dependencies, and support RMF/ATO activities.

You’ll collaborate with engineering teams to remediate vulnerabilities, participate in threat modeling, and integrate security checks into CI/CD pipelines, ensuring secure design and coding practices

Qualifications

• Active TS/SCI clearance.
• Hands-on secure code review or application security experience.
• Proficiency in programming languages such as Java, C#, Python, JavaScript/TypeScript, C/C++, or Go.
• Knowledge of government security requirements and NIST SP 800-53 controls.
• Ability to translate security requirements into concrete code changes and validation steps.
• Experience with Git-based version control and CI/CD workflows.
• Understanding of web application and API security, data protection in transit and at rest.
• Bachelor's degree or equivalent practical experience.

Responsibilities

• Perform manual security reviews of source code, pull requests, and application changes to identify vulnerabilities.
• Assess application security against NIST 800-53 and SP 800-218 practices and other requirements.
• Translate controls into code review checklists, testable criteria, and developer guidance.
• Review authentication, authorization, input validation, session management, and data protection for secure design.
• Execute SAST, DAST, SCA, and secrets scanning; validate findings and filter false positives.
• Evaluate third-party dependencies for vulnerabilities and SBOM activities.
• Collaborate with developers to propose fixes and verify remediation through retesting.
• Participate in threat modeling and architecture reviews to identify risks early.
• Integrate automated security checks into CI/CD workflows and gates.
• Document findings with locations, impact, and remediation evidence.
• Support RMF/ATO activities by providing security evidence to stakeholders.
• Communicate unresolved risks and release-readiness recommendations.

Skills

Security code review

Programming languages

Git workflows

Threat modeling

Education

Bachelor's degree in CS/SE/Cybersecurity

Experience with government programs

Tools

Fortify

Checkmarx

CodeQL

Veracode

SonarQube

Snyk

OWASP ZAP

Job description

CDW is seeking a cleared Software Security Engineer to perform hands‑on code reviews, assess security against government standards, and translate requirements into actionable guidance for developers. You will validate SAST/DAST/SCA findings, evaluate dependencies, and support RMF/ATO activities.

You’ll collaborate with engineering teams to remediate vulnerabilities, participate in threat modeling, and integrate security checks into CI/CD pipelines, ensuring secure design and coding practices