Secure Software Assessment SME (Clearance Required) - Future Opportunity
Core
Lead application security assessment and remediation activities, overseeing secure coding practices, code reviews, and vulnerability analysis for Defense Human Resources Activity software systems.
Role type
Senior IC application security engineer (secure software assessment)
Builds
Secure development posture and risk mitigation for DHRA software systems
Domain
Defense / Cybersecurity
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
secure coding practices, static analysis (SAST), dynamic analysis (DAST), vulnerability analysis, secure design patterns, CI/CD pipeline integration, software security standards development, risk prioritization, technical reporting
Preferred skills
secure application development in DoD environments, DevSecOps integration, container security, cloud-native hardening, supply chain risk management, programming languages (Java, C#, Python, JavaScript), NIST SP 800-218, OWASP Top 10
Technologies
Fortify, Veracode, Checkmarx, SonarQube
Responsibilities
Lead application security assessment and remediation, perform secure code reviews and vulnerability analysis, develop software security standards, advise development teams on remediation strategies, coordinate security tool integration into CI/CD, support vulnerability tracking and closure, provide training and mentorship on secure coding, generate technical reports and executive summaries, evaluate application security technologies
Seniority
Senior, hands-on IC
