LightFeather · 6 days ago

Software Security Engineer

Tysons Corner, VA

Full-time

Onsite

Senior Level

9+ years exp

Wonder how qualified you are to the job?

AnalyticsConsulting

Insider Connection @LightFeather

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Develop and enforce security protocols within our DevOpsSec (CI/CD) pipelines

Implement infrastructure as code (IaC) with an emphasis on security

Perform security testing and code reviews to improve software security

Provide engineering solutions for new software to help mitigate security vulnerabilities

Maintain and update technical documentation

Consult with team members on best practices for secure coding

Stay updated with new tools, technologies, and best practices in software security

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Software SecurityCISSPCSSLPCASEAWS Solutions ArchitectAWS DevOps EngineerDevSecOps ToolsJIRASeleniumJenkinsSystems EngineeringNIST SP 800-37NIST SP 800-53

Required

US Citizenship

Ability to obtain and maintain a Public Trust clearance; previous or active DHS ICE clearance is preferred

Bachelor’s degree in a science, technology, engineering, and math (STEM) field

9 years of IT security experience with a Bachelor's degree, or 7 years with a Masters, or 4 years with a PhD

Minimum 5 years of technical leadership in the field of software security

Certified Information Systems Security Professional (CISSP), Certified Secure Software Lifecycle Professional (CSSLP), or Certified Application Security Engineer (CASE)

AWS Certified Solutions Architect Professional, or AWS Certified DevOps Engineer Professional

Proficient with DevSecOps pipeline tools such as JIRA, automated testing (Selenium, Jenkins), automated deployments, and strategies for blue-green deployments and branching

Strong understanding of Systems Engineering processes including requirements analysis and allocation

In-depth experience performing Security Control Assessment in compliance with standards such as NIST SP 800-37, NIST SP 800-53, and related guidelines