Software Assurance Evaluation Engineer

MANTECH•Hanover, MD

5d•$165,900 - $295,300•Onsite

About The Position

MANTECH seeks a motivated, career and customer-oriented Software Assurance Evaluation Engineer to join our team in Hanover, MD. The Software Assurance Evaluation Engineer will leverage their strong technical background and knowledge to support software assurance and security initiatives for a mission-critical organization within the Intelligence Community, focusing on secure and reliable data dissemination through rigorous source code analysis.

Requirements

15+ years of professional experience (or 13+ years with a Bachelor’s degree, or 11+ years with a Master’s degree) in Systems Security Engineering, Software Programming, or Computer Science.
Strong software analysis or development experience in C/C++ or C#, with the ability to read/analyze Java.
An active TS/SCI with Polygraph.

Nice To Haves

Experience with technology tools including Klocwork, CodeSonar, Fortify, CodePeer, IDA Pro, or Fortran-Lint.
Experience with low-level architectures (x86_64, PowerPC, MIPS), assembly language (ASM), or legacy languages like Ada.
Experience with Rust and/or the ability to learn.

Responsibilities

Utilizing, fine-tuning, and evaluating the suitability of automated Software Assurance (SwA) tools for specific customer environments to maximize detection and minimize false positives.
Interpreting SwA tool results to detect vulnerabilities, triage findings, and drive secure coding practices across the development lifecycle.
Developing and executing test methodologies, custom scoring criteria, and specific test cases to support and optimize SwA tool analysis.
Performing software security assessments and interfacing with clients and developers to recommend effective remediation strategies for identified code vulnerabilities.
Creating technical documentation, comprehensive vulnerability test reports, and risk assessments for leadership.
Researching and assessing emerging SwA tools and methodologies to continually enhance the team's software security analysis capabilities.