Senior Cybersecurity Engineer – Software Assurance

The Mitre Corporation•New Bedford, MA

4d•$129,200 - $193,800•Onsite

About The Position

At MITRE, your passion fuels work that impacts our nation and improves lives. This is where your skills strengthen national security, cybersecurity, health, transportation, and citizen services. We’re a nonprofit engineering, applied research, and advanced technology organization working in the public interest. With objectivity and integrity at our core, we lead federally funded research and development centers for U.S. government agencies – collaborating with industry and academia to deliver integrated, high-impact solutions that advance our nation’s health, security, and prosperity. Our people tackle the toughest technical challenges, supported by competitive benefits, meaningful career development, and a culture of innovation, collaboration, and technical excellence. Choose MITRE for a career with purpose — and help shape the future. The Cryptography, ICAM, & System Assurance department is comprised of an inspired multi-disciplinary team of researchers and practitioners driving innovation in the department’s technical areas of focus, with particular emphasis in Cryptography; Software Assurance (SwA); and Identity, Credential and Access Management (ICAM). We develop and apply scalable approaches for systems and software, evaluate technology and solutions, lead and foster external partnerships within the communities we support, and conduct novel research and development. We serve in critical roles including: Conceive of and advance novel technical ideas, Provide deep analyses whose results drive decision-making by our sponsors, Build proof-of-concept systems that leverage new technology and concepts, and Engage with the vendor community, academia, and our sponsors to raise the bar on cyber security throughout the industry. As a member of the Cryptography, ICAM, & System Assurance department in the Cyber Engineering Division, you will join an inspired team supporting developers and security researchers around the world. We are seeking a qualified candidate for a technical position involving the application of core capabilities in Software Assurance and Secure Coding, the implementation of these into modern DevSecOps processes, and the integration of AI technologies throughout this constantly changing domain. We are looking for an individual with the hard-to-find combination of hands-on software development and application security practice. The successful candidate will directly contribute to the technical work for our sponsors and take an active role in overall team dynamics and eventual leadership.

Requirements

A minimum of 5 years of related experience with a bachelor’s degree; or 3 years and a master’s degree; or a PhD with relevant experience who can immediately contribute at this job step; or equivalent combination of related education and work experience.
Experience in secure application development and software assurance
Knowledgeable about static and dynamic application security testing (SAST/DAST)
Demonstrated experience collaborating successfully with teams
Demonstrated examples of building and leveraging relationships that had a positive impact on the work
Track record of impactful work that made a difference
Strong analytical and problem-solving skills and proactive, critical thinking skills
Excellent written/verbal communications skills
This position requires the ability to obtain a top secret clearance
U.S. Citizenship is required.
This position requires a minimum of 3 days a week on-site.

Nice To Haves

Bachelor’s degree in computer science, Software Engineering, Cyber Security, or related technical field of study
Previous experience as a software or cyber security engineer
Familiarity with cyber security principles, concepts and technologies
Working knowledge of standards for describing and prioritizing vulnerabilities and weaknesses (i.e., CVE, CVSS, CWE)
Deep technical understanding of one or more software analysis areas (e.g., static code analysis, symbolic execution, or binary analysis)
Familiarity with Python, C, C++, C#, Rust, GoLang and other current development languages
Prior involvement in performing software/hardware design, architecture, and/or code reviews
Ability to possess and maintain a DoD Top Secret clearance

Responsibilities

Providing thought leadership in Software Assurance both within MITRE and for our sponsors
Assisting sponsors in implementing Software Assurance best practices within their operational environments
Conducting research into novel software/hardware weaknesses and attack patterns
Increasing the impact of the CWE program by expanding and improving technical content
Performing static analysis on source code to support a range of use cases
Researching ways to improve traditional SwA techniques by leveraging the newest AI technologies
Implementing prototype systems to manage Software Bill of Materials (SBOMs)
Helping to advance related research projects, bringing your unique knowledge to bear