SECURE SOFTWARE ASSESSOR (CYBER-NGA)

Quantum Research International Inc • Springfield, VA

2d • Onsite

About The Position

Quantum Research International, Inc. is seeking an intermediate Secure Software Assessor to support the NGA DEFENDER Cybersecurity Software Assurance team. The contractor helps assess the risk of using commercial, government, and open-source software within NGA and applies software code analysis techniques to mitigate risk throughout the software development lifecycle (SDLC). The assessor analyzes the security of new or existing computer applications, software, and specialized utility programs that are on or preparing to deploy on NGA systems, and provides actionable results. The position is available immediately at NGA Campus East in Springfield, Virginia.

Requirements

• TS/SCI eligibility, subject to CI Polygraph.
• Bachelor’s degree; Sec+, CSSLP, or GSEC may be accepted in lieu of a degree.
• Experience with Computer Network Defense (CND) Intelligence Analysis, Assessments, and/or Open-Source Research.
• Knowledge of government standards for data security, including markings, handling classified and unclassified information, and distribution of that information.
• Knowledge of computer networking concepts and protocols, network security methodologies, and risk management processes, including methods for assessing and mitigating risk.
• Understanding of basic system and application security threats and vulnerabilities.
• Familiarity with the software development lifecycle.

Nice To Haves

• Experience or familiarity with static code analysis using tools such as Fortify and GitLab.
• Familiarity with secure software deployment methodologies, tools, and practices, including agile, waterfall, and DevOps.
• Ability to communicate complex information, concepts, or ideas confidently and in a well-organized manner through verbal, written, and/or visual means.

Responsibilities

• Apply the automated enterprise NGA Software Assurance Process (SWAP) for submission and adjudication of NGA software requests.
• Capture security controls during the requirements phase to integrate security into the process, identify key security objectives, and maximize software security while minimizing disruption to plans and schedules.
• Consult with engineering staff to evaluate the interface between hardware and software.
• Evaluate factors such as required reporting formats, cost constraints, and security restrictions to determine hardware configuration.
• Identify common coding flaws at a high level, identify their security implications, and apply methodologies within centralized and decentralized environments across enterprise computer systems in software development.
• Identify security issues related to steady-state operation and management of software, and incorporate security measures required when a product reaches end of life.
• Analyze security needs and software requirements to determine design feasibility within time and cost constraints and security mandates.
• Coordinate with software development teams on custom code requests and perform NGA's static code analysis process.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level