Software Assurance Engineer
Core
Analyze source code and tune automated software assurance tools to identify vulnerabilities and promote secure coding practices for Intelligence Community clients.
Role type
Senior IC software assurance engineer (security analysis)
Builds
Secure, reliable data dissemination through rigorous source code analysis
Domain
Defense/Intelligence Community, Systems Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure
Required skills
C/C++, C#, Java analysis, x86_64 architecture, PowerPC architecture, MIPS architecture, assembly language, Ada, security review, vulnerability triage, test design, risk assessment
Preferred skills
SwA tools (Klocwork, CodeSonar, Fortify, CodePeer, IDA Pro, Fortran-Lint), Rust, low-level architecture knowledge
Technologies
Ada, C#, Fortran, Java, Rust, Security, C++, Fine-tuning, Support
Responsibilities
Tune and assess automated software assurance tools to fit customer environments; analyze tool outputs to identify vulnerabilities and triage findings; design and run test approaches and custom scoring methods; perform software security reviews and recommend fixes; prepare technical documentation and risk assessments; research emerging software assurance tools and techniques.
