Secure Software Engineer (Ts/Sci Clearance Required)
NorthHill Technology•Chantilly, VA
•Onsite
About The Position
NorthHill Technology Resources is seeking a Secure Software Engineer for a direct-hire role supporting a critical Federal Program in Chantilly, VA. The client is a highly respected Federal Integrator. The role involves developing an Independent Verification and Validation (IV&V) program to evaluate the quality, accuracy, and mission utility of GEOINT products. This framework will support various GEOINT data types through automated testing, metric generation, data storage, visualization, and reporting. The successful candidate will contribute to the design, development, integration, testing, deployment, and sustainment of the enterprise IV&V platform, collaborating with Government stakeholders to enhance GEOINT IV&V capabilities, implement automated verification, and deliver secure, scalable software solutions.
Requirements
- Bachelor's degree in Computer Science, Software Engineering, Computer Engineering, Cybersecurity, or a related technical discipline and 9 years of relevant experience, or a Master's degree in a related field and 7 years of relevant experience.
- Experience designing, developing, testing, and maintaining enterprise software applications using modern object-oriented programming languages such as Python, Java, C#, C++, or Go.
- Experience developing web applications, RESTful APIs, backend services, and user interface components.
- Experience implementing secure software development practices, secure coding standards, and application security principles.
- Experience developing software using modern software engineering methodologies including Agile development, version control, and continuous integration.
- Experience integrating software with relational and/or NoSQL databases.
- Experience developing automated testing, software verification, and quality assurance frameworks.
- Experience with Git, GitLab, GitHub, or similar source code management platforms.
- Experience collaborating within DevSecOps environments utilizing automated build, testing, and deployment pipelines.
- Knowledge of cybersecurity principles including authentication, authorization, encryption, vulnerability management, logging, and auditing.
- Experience supporting software vulnerability remediation and security assessment activities.
- Strong analytical, troubleshooting, and problem-solving skills.
- Strong written and verbal communication skills with the ability to prepare technical documentation and communicate effectively with Government stakeholders.
- US Citizenship and an active TS/SCI Clearance is required.
Nice To Haves
- NGA domain experience with development or deployment into CORE and/or RLE. (CORE highly preferred).
- Experience developing applications supporting imagery exploitation, geospatial analytics, mapping, remote sensing, or other GEOINT mission areas.
- Experience developing cloud-native applications deployed within Kubernetes, OpenShift, or AWS environments.
- Experience supporting Risk Management Framework (RMF), ICD 503, NIST SP 800-53, Authority to Operate (ATO), or Authority to Develop (ATD) processes.
- Experience developing automated verification, validation, or test frameworks supporting scientific, engineering, or geospatial applications.
- Security certifications such as Security+, CSSLP, CISSP, or cloud security certifications.
Responsibilities
- Design, develop, test, and maintain software applications supporting the enterprise GEOINT IV&V framework.
- Develop secure application services, RESTful APIs, user interface components, and backend services supporting automated GEOINT evaluation workflows.
- Implement software that automates GEOINT metric generation, data validation, quality assessment, reporting, and visualization.
- Develop software components supporting ingestion, processing, storage, and retrieval of imagery, geospatial data, mapping products, and other GEOINT data sources.
- Apply secure software development practices throughout the software development lifecycle, including threat-informed design, secure coding, and automated security testing.
- Identify, analyze, and remediate software vulnerabilities identified through static analysis, dynamic testing, dependency scanning, and penetration testing activities.
- Integrate authentication, authorization, encryption, audit logging, and other security controls into enterprise applications.
- Collaborate with Cloud & DevOps Engineers to support containerized deployments, CI/CD pipelines, and DevSecOps automation.
- Develop automated unit tests, integration tests, regression tests, and validation frameworks supporting repeatable software quality assurance.
- Support software integration, system testing, defect resolution, and operational transition activities.
- Participate in system architecture reviews, software design reviews, code reviews, and technical interchange meetings.
- Prepare technical documentation including software design descriptions, interface documentation, security documentation, and user guides.
- Support Risk Management Framework (RMF), Authority to Operate (ATO), and cybersecurity assessment activities through development of secure software artifacts and remediation of identified findings.
- Participate in Agile software development activities including sprint planning, backlog refinement, demonstrations, and retrospectives.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Upload and Match Resume
What This Job Offers
Job Type
Full-time
Career Level
Senior
