Security Software Engineer - Hanover
Core
Design and develop secure software for DoD programs, integrating security throughout the SDLC in regulated cloud-native environments.
Role type
Senior IC security software engineer
Builds
Secure software systems, APIs, and DevSecOps pipelines for multi-tenant cloud environments
Domain
Defense / Cybersecurity / Cloud Infrastructure
Required skills
Secure coding practices, application security (OWASP Top 10), cryptography fundamentals, authentication and authorization patterns, threat modeling, penetration testing, SAST/DAST, NIST 800-171/CMMC/FedRAMP compliance, AWS/Azure security services, container security (Docker/ECS), Zero Trust Architecture, DevSecOps pipelines
Preferred skills
GCC High or GovCloud experience, microservices or event-driven architectures, federal or cleared environments background, CISSP/CSSLP/CASP+/OSCP/CEH/GIAC/CCP/CCA certifications
Technologies
AWS, Azure, Docker, ECS, Prisma, Checkov, Snyk, Aqua, IAM, WAF, SAML, OIDC, REST, CI/CD
Responsibilities
Design and develop secure software integrating security into every SDLC phase, review architectures and harden code against OWASP Top 10 and DoD STIGs, automate security gates in CI/CD pipelines, implement IAM controls and least-privilege authorization frameworks, add application security logging and monitoring, lead code reviews and penetration testing, triage and remediate vulnerabilities, support application-layer incident response, act as an embedded security champion, develop security training and runbooks, work with DevOps/SRE on secure infrastructure-as-code practices
Seniority
Senior, hands-on IC
