Software Assurance (SwA) Engineer

COLSA Corporation • Huntsville, AL

4d

About The Position

COLSA Corporation is seeking an experienced Software Assurance (SwA) Engineer to join its team in Huntsville, Alabama. The role supports the security and integrity of complex software applications throughout the software development lifecycle (SDLC), with a focus on identifying vulnerabilities, conducting application security testing, and supporting software assessment, authorization, and readiness for materiel release. The position calls for strong technical expertise in software assurance and application security, including the ability to analyze complex software systems, assess security weaknesses, and develop effective risk-mitigation solutions.

Requirements

• Strong technical expertise in software assurance and application security.
• Ability to analyze complex software systems, identify and assess security weaknesses, and develop effective solutions to mitigate risk.

Responsibilities

• Plan and execute complex application security investigations and testing, including SAST, DAST, IAST, fuzzing, and penetration testing.
• Analyze source code and compiled binaries to identify security flaws and map findings to CWEs and CVEs.
• Develop and apply advanced methods, theories, and research techniques to investigate and solve complex software security problems.
• Coordinate software engineers, development teams, and technical support staff on assigned SwA projects, integrating security throughout the SDLC.
• Plan, conduct, and technically direct major phases of significant SwA projects to support software readiness for materiel release and compliance with safety and security standards.
• Review technical products and their implementation to ensure vulnerability remediations are effective and comply with current security practices.
• Evaluate vendor capabilities and commercial or open-source SwA tools to provide required security testing products or services, as needed.
• Review literature, patents, current practices, and threat landscapes relevant to assigned application security projects.
• Provide technical consultation to other organizations on secure coding practices and, as needed, provide work leadership to lower-level employees.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed