Security Software Engineer Onsite
Core
Design and develop secure software for DoD programs, integrating security throughout the software development lifecycle in regulated cloud environments.
Role type
Senior IC security software engineer
Builds
Secure software systems, APIs, and DevSecOps pipelines for multi-tenant cloud environments
Domain
Defense/DoD, Cloud Security, Application Security
Required skills
Secure coding practices, Threat modeling, Penetration testing, SAST/DAST tools, Cryptography fundamentals, IAM controls, CI/CD automation, Cloud security services (AWS/Azure)
Preferred skills
Container security, Zero Trust Architecture, DevSecOps pipelines in regulated environments, Microservices security, Federal/cleared-environment background
Technologies
AWS, Azure, Docker, Kubernetes, Python, Go, C#, JavaScript/TypeScript, SAML, OIDC, WAF, Prisma, Checkov, Snyk, Aqua
Responsibilities
Design and develop secure software integrating security throughout the SDLC; Apply secure coding standards and threat modeling aligned with NIST 800-53 and CMMC controls; Automate security gates in CI/CD pipelines including SAST, DAST, and secrets detection; Implement IAM controls, SSO/SAML/OIDC flows, and least-privilege authorization frameworks; Lead code reviews, security scans, and targeted penetration testing; Triage and remediate vulnerabilities within POA&M timelines; Support application-layer incident response and contribute to after-action reports; Serve as a security champion for engineering teams through mentorship; Develop and deliver security training and runbooks for DevOps teams; Work with DevOps/SRE teams to enforce secure infrastructure as code and runtime monitoring.
Seniority
Senior, hands-on IC
