Apply on Employer Site

ICF · 1 month ago

Secure Software Assessment SME (Clearance Required) - Future Opportunity

Alexandria, VA

Full-time

Onsite

Senior Level, Lead/Staff

$108K/yr - $184K/yr

10+ years exp

ICF is seeking a Secure Software Assessment Subject Matter Expert (SME) to support a Defense Human Resources Activity (DHRA) cybersecurity program. In this role, you will oversee software assurance activities and lead efforts to ensure application security through secure coding practices, code reviews, and vulnerability analysis.

ConsultingInformation TechnologyProfessional Services

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Lead application security assessment and remediation activities across multiple DHRA software systems and environments

Perform and oversee secure code reviews, static (SAST) and dynamic (DAST) analysis, and manual assessments to identify vulnerabilities

Develop and maintain software security standards, secure coding guidelines, and review procedures consistent with DoD and NIST frameworks

Advise development teams on remediation strategies, secure design patterns, and risk prioritization

Coordinate integration of security tools into the software development lifecycle (CI/CD pipelines)

Support vulnerability tracking and closure through collaboration with developers, system owners, and RMF personnel

Provide training and mentorship on secure coding principles and software assurance practices

Generate detailed technical reports and executive summaries of findings, trends, and recommendations

Evaluate and recommend application security technologies and techniques to improve software assurance capabilities

Contribute to governance and continuous improvement of DHRA’s software security processes

Qualification

Application securityVulnerability analysisSecure coding practicesSAST/DAST toolsCISSP-ISSEPProgramming languagesDoD environmentsAgileDevSecOpsNIST SP 800-218Communication skillsCollaboration skills