Software Assurance Evaluation Engineer

MANTECH•Hanover, MD

3d•$128,000 - $214,400•Onsite

About The Position

MANTECH is seeking a motivated, career- and customer-oriented Software Assurance Evaluation Engineer to join its team in Hanover, Maryland. The role supports software assurance and security initiatives for a mission-critical Intelligence Community organization, with a focus on secure and reliable data dissemination through rigorous source code analysis. The engineer evaluates and fine-tunes automated Software Assurance (SwA) tools for customer environments, interprets tool results, and conducts software security assessments. The role also develops test methodologies and cases, recommends remediation strategies, produces technical documentation and risk assessments, and researches emerging tools and methodologies to improve software security analysis capabilities. An active TS/SCI clearance with polygraph is required; sponsorship for expanded-scope polygraph requirements is offered after hire.

Requirements

At least 12 years of professional experience in Systems Security Engineering, Software Programming, or Computer Science; alternatively, at least 10 years with a bachelor's degree or 8 years with a master's degree.
Strong software analysis or development experience in C/C++ or C#.
Ability to read and analyze Java.
Active TS/SCI clearance with polygraph.
Must be able to remain stationary for 50% of the time.
Occasionally move about inside the office to access file cabinets, office machinery, and similar items.
Frequently communicate with co-workers, management, and customers, including delivering presentations, and exchange accurate information.

Nice To Haves

Experience with Klocwork, CodeSonar, Fortify, CodePeer, IDA Pro, or Fortran-Lint.
Experience with low-level architectures such as x86_64, PowerPC, or MIPS; assembly language (ASM); or legacy languages such as Ada.
Experience with Rust and/or ability to learn it.

Responsibilities

Utilize, fine-tune, and evaluate automated Software Assurance tools for specific customer environments to maximize detection and minimize false positives.
Interpret SwA tool results to detect vulnerabilities, triage findings, and promote secure coding practices throughout the development lifecycle.
Develop and execute test methodologies, custom scoring criteria, and test cases to support and optimize SwA tool analysis.
Perform software security assessments and work with clients and developers to recommend remediation strategies for identified code vulnerabilities.
Create technical documentation, vulnerability test reports, and risk assessments for leadership.
Research and assess emerging SwA tools and methodologies to enhance the team's software security analysis capabilities.