Senior Software Security Engineer - District Attorney

County of Riverside•Riverside, CA

6d•Onsite

About The Position

The Office of the District Attorney is seeking a Senior Software Security Engineer for the Riverside location. The Software Engineering team within the Riverside County District Attorney’s Office has designed and built a sophisticated software platform entirely in house to support the complex operations of a modern DA legal environment. The system has grown to encompass interconnected services and multiple modules, including case management, transaction processing, reporting, data management, and real time integrations with external agencies. As the system continues to grow, security and software compliance have become increasingly critical to its design, development, and maintenance. The Senior Software Security Engineer will play a key role in designing, implementing, reviewing, and maintaining security controls across the platform, ensuring that security is built into services and architecture from the ground up. This includes protecting against threats such as malicious JavaScript, denial of service attacks, session hijacking, SQL injection, broken access control, authentication failures, security misconfigurations, and improper handling of audit and exception logs. The role will also support the security of integrations with external partners, as well as the secure management and rotation of keys, credentials, certificates, and configurations. Working alongside experienced software engineers, the Senior Software Security Engineer will be key in engineering decisions that affect the security, reliability, and compliance of the system while keeping pace with evolving security standards and software compliance requirements. If you are looking for a challenging work that truly matters, we would love to hear from you!

Requirements

Graduation from an accredited college or university with a bachelor's degree in computer science, computer/software engineering, information technology, or related technical fields.
Six years of hands-on software engineering experience in web front-end and back-end development.
Four years of the required experience must be recent and continuous hands-on experience in a diverse array of programming languages such as .Net Core, C++, C#, TypeScript, SQL and frameworks including NodeJS, Angular, implementation of relational databases and extensive experience with database design patterns and performance plans.
Proficiency in essential technologies such as SASS, Bootstrap, Web API, Shared Libraries, MSSQL, T-SQL, Stored Procedures, and DevOps enhancement and upgrade is required.
Knowledge of the principles, methods, and techniques in software engineering in web front end and backend development; data structures; algorithm analysis; computer organization and architecture; compiler (front-end parser); relational databases; operating systems; backend development in an object-oriented language; automata and formal languages or computational theory; systems configurations, library publishing packages, NuGet packages and repositories; networking or distributed computing; source control and NuGet packages.
Ability to build user-friendly software systems; employ a systematic and structured approach to software engineering; supervise and monitor the work of subordinate staff; monitor and troubleshoot software errors; communicate technical details clearly and succinctly; take initiatives to learn new technologies; understand technical requirements and follow detailed technical instructions; work in a fast paced but flexible environment; collaborate and work as part of a team.
Possession of a valid California Driver's License may be required.
A successful Security Clearance conducted by the DA is required for positions within the Riverside County Office of the District Attorney.
Qualified applicants must have hands-on security engineering experience within specialized software engineering focused on secure design, development, integration, operation, monitoring, and protection of large scale enterprise systems, APIs, databases, identity services, and/or supporting systems.
Software development experience within firewalls is required.

Responsibilities

Build security into enterprise software system components from the ground-up that are reliable, maintainable, scalable, secure, and reusable.
Have the ability to learn and keep up with various software compliance checklists and rules, such as Trusted Systems, Racial Justice Act, E-Sign Act, CJIS, Telephone Act, ADA, and others.
Build security controls into Web APIs and their underlying architecture to interconnect subsystems.
Keep up with security standards and Implement up to date security engineering practices
Build security into front-end and back-end software features by understanding a variety of software engineering/programming languages for example html, CS, Javascript, C#, C++, Angular, TypeScript, Bootstrap, Web API (REST, RPC), SQL, PowerShell
Build high performing database objects and functions utilizing Microsoft SQL, Transaction SQL, Stored Procedures, Profiling, and Optimization plans.
Develop and maintain data warehouse and transaction database architecture and file system.
Develop scripts and scheduled jobs for software transaction data migration, and maintain database version compatibility with software back-end.
Maintain and enhance security into existing software systems.
Participate in DevOps builds and releases, including DevSecOps Development Security Operations.
Ensure software features continue to work properly after maintenance and testing.
Investigate and resolve security failures during upgrades using various troubleshooting tools.
Participate in the support for any software issues that may arise in all environments from development through production.
Maintain and monitor security in various layers of the system from operating system configurations as it relates to the software front-end and library publishing packages, NuGet packages and repositories.
Generate and keep a repository of security keys and certificates securely.
Lead and support staff involved in designing, developing, and implementing security controls into the enterprise software for the DA; coach and mentor staff.