Security Systems Developer

ShorePoint•Herndon, VA

1d•Remote

About The Position

ShorePoint is seeking a Security Systems Developer to design, develop, and evaluate information system security throughout the entire development life cycle. This role acts as a senior technical lead, integrating robust security measures to ensure confidentiality, integrity, availability, and non-repudiation across hardware, software, and network applications. The Security Systems Developer is vital in performing risk analysis and developing mitigation strategies to resolve architectural gaps and vulnerabilities in complex, multi-level classification environments. This position offers a unique opportunity to shape the growth, development, and culture of a fast-growing cybersecurity company.

Requirements

Proficiency in programming languages like Python, Java, JavaScript or .NET.
Deep expertise in information security systems engineering principles, specifically NIST SP 800-160 and the application of security models such as Bell-LaPadula, Biba and Clark-Wilson.
Proficiency in enterprise architecture methods (e.g., TOGAF, DoDAF, FEAF) and secure configuration techniques, including STIGs and CIS best practices.
Mastery of network security architecture (defense-in-depth), traffic flow analysis (TCP/IP, OSI model) and identity management protocols (PKI, Oauth, SAML, SPML).
Advanced knowledge of firewalls, DMZs, encryption algorithms and access authentication methods across both standard and specialized (ICS/SCADA) environments.
Thorough knowledge of how secure application development methodologies and how an application is deployed into cloud environments (Appian, Salesforce, Azure).
Strong understanding of PII (Personally Identifiable Information) and PCI (Payment Card Industry) data security standards, alongside the legal and ethical policies governing cybersecurity and privacy.
7+ years of relevant experience.
Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
Applicants must be a U.S. citizen and eligible to obtain and maintain a security clearance, in compliance with federal contract requirements.

Nice To Haves

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering or a related field.
Industry recognized certifications.
Experience with how to use AI for application security is a plus.

Responsibilities

Review applications across the enterprise to ensure they are designed, built and maintained securely against NIST and OWASP standards.
Lead secure code reviews to identify vulnerabilities.
Perform risk analysis (threat, vulnerability and probability of occurrence) when applications or systems undergo major changes and develop mitigation strategies for cost, schedule, performance and security risks.
Conduct security reviews to identify gaps in architecture, recommend security changes to system components and incorporate vulnerability solutions into system designs.
Analyze security measures that support confidentiality, integrity, availability, authentication and non-repudiation.
Develop detailed security design documentation for components and interfaces, including functional descriptions of security implementation and keep documentation current.
Identify components and elements, allocate security functions and describe relationships between system elements; trace requirements to design components and perform gap analysis.
Recommend security designs for new or existing systems and direct remediation of technical issues discovered during testing and implementation (including interoperability and protocol issues).
Identify, assess and recommend cybersecurity or cybersecurity-enabled products for system use, ensuring compliance with organizational evaluation and validation requirements.
Provide input to implementation plans, SOPs, RMF process activities and documentation and support security/certification test and evaluation activities.
Verify stability, interoperability, portability and scalability of the system architecture and security design