Cybersecurity Engineer - Software Assurance Implementation

Centil

9d•$110,000 - $150,000•Onsite

About The Position

This opening is for a Cybersecurity Engineer to support our Missile Track Custody program in the execution of software assurance activities, focusing on secure development practices and vulnerability management. The ideal candidate has 3-5 years of professional experience in cybersecurity software development or related fields. They possess a deep understanding of secure development practices, vulnerability management, and the ability to integrate security into the DevSecOps pipeline. Proven technical expertise in static code analysis and a solid understanding of secure software engineering principles are critical to success in this role. This position will work closely with other engineers and program leadership to support the overall goals and objectives of the program. Please note this is a full time position and will be onsite in Boulder a minimum of 3 days per week.

Requirements

Current Secret security clearance or higher
3-5 years of professional experience in software assurance, cybersecurity or a related field
Proficiency with Static Code Analysis Tools: Hands-on experience with tools such as Coverity, CodeSonar, Parasoft C/C++test, Fortify Static Code Analyzer, LDRA Tool Suite, or equivalent. Ability to configure, run, and interpret analysis results.
Secure Software Development Expertise: Strong understanding of secure coding principles and the ability to embed security into all phases of the SDLC.
Threat Identification and Mitigation: Experience identifying software vulnerabilities and proposing actionable mitigation strategies based on analysis results.
Proficient in applying Risk Management Framework (RMF) principles to assess, mitigate, and monitor security risks across systems and processes.
Collaboration Skills: Demonstrated ability to work closely with development teams, testers, and stakeholders to integrate security practices seamlessly into workflows.
Documentation and Reporting: Ability to document findings, prepare reports for stakeholders, and guide remediation efforts.
CompTIA Security+ certification (or willingness/ability to obtain within 6 months of start date)

Nice To Haves

Knowledge of Program Protection Implementation Plan (PPIP)
Knowledge of relevant regulatory compliance standards and regulations (e.g., NIST SP 800-53, DoD policies, ISO 27001)
Certified Information Systems Security Professional (CISSP)
Certified Secure Software Lifecycle Professional (CSSLP)
GIAC Secure Software Programmer (GSSP)
Certified Ethical Hacker (CEH)
Certified Information Security Manager (CISM)
GIAC Certified Incident Handler (GCIH)

Responsibilities

Develop the Software Assurance Plan as part of the Program Protection Implementation Plan (PPIP), detailing secure coding, vulnerability assessment, and remediation strategies.
Conduct immediate Static Code Analysis and Vulnerability Scanning on mission-unique software, identifying and tracking vulnerabilities.
Collaborate with the MSOC Software team to implement secure software development practices and ensure vulnerabilities are remediated according to the Software Assurance Plan.
Provide ongoing vulnerability assessments, periodic code reviews, and Software Assurance metrics to track progress and compliance.

Benefits

Generous PTO for vacation, personal, or sick days
Ten (10) paid holidays per year: 8 fixed holidays, plus 2 additional Floating Holidays per year (taken at Employee's discretion)
Flex time and the ability to create your own schedule
Discretionary bi-annual bonus plan, based on individual and company performance
401K retirement plan with immediately vested company contributions, no matching required
Healthcare coverage plan through an Individual Coverage Health Reimbursement Arrangement (ICHRA)
Employer-paid Life, Long-Term Disability, and Accidental Death and Dismemberment insurances
Access to optional, employee-paid Life, Accident, Critical Illness, and Hospital Indemnity insurances
Access to a Dependent Care Flexible Spending Account (FSA)
Paid training and conference attendance
Additional benefits, as needed, for significant life events: parental leave, bereavement leave, jury duty pay, military leave pay
One-time home office reimbursement
Phone plan reimbursement
Employee Assistance Program (EAP) services, supporting emotional health and well-being of employees and their families