Secure Software Assessment Sme

CGI•Arlington, VA

57d•$143,500 - $282,500

About The Position

We are seeking a highly skilled Secure Software Assessment Subject Matter Expert (SME) to ensure the security of our software applications through robust secure coding practices and comprehensive code vulnerability assessments. The ideal candidate will lead a team of application security specialists, providing expert guidance on secure coding practices and static/dynamic analysis methodologies. This position is located in Arlington, Va.

Requirements

Bachelor's degree in a technical discipline or related field.
10+ years of experience in progressively more complex roles in software development, vulnerability analysis, and/or application security management.
Proven experience in leading application security teams and initiatives.
Strong knowledge of secure coding practices, static/dynamic analysis methodologies, and vulnerability assessment tools.
Secret Security Clearance.
Familiarity with DCWF Work Role: 622 - Secure Software Assessor [Advanced] and DCWF KSATs: Secure Software Assessor – DoD Cyber Exchange.

Nice To Haves

Excellent communication and leadership skills.
Ability to work collaboratively with development teams and stakeholders.
Strong analytical and problem-solving skills.
Experience with security tools and technologies such as SAST, DAST, and vulnerability scanners.

Responsibilities

Lead and mentor a team of application security specialists, fostering a culture of security excellence.
Provide expert guidance to development teams on secure coding techniques and remediation strategies for identified vulnerabilities.
Oversee the execution of application security assessments, including code reviews and vulnerability scans, to identify and address security flaws in software applications.
Deliver actionable recommendations to development teams and stakeholders based on assessment findings to enhance application security and mitigate identified risks.
Develop and maintain application security procedures to promote secure software development practices across the organization.
Collaborate with cross-functional teams to integrate security into the software development lifecycle.
Stay updated with the latest security trends, tools, and technologies to continuously improve security practices.