Software Assurance (SwA) Engineer

COLSA • Huntsville, AL

5d

About The Position

COLSA Corporation is seeking an experienced Software Assurance (SwA) Engineer to join its team in Huntsville, Alabama. The role supports the security and integrity of complex software applications throughout the software development lifecycle (SDLC), focusing on identifying vulnerabilities, conducting application security testing, and supporting software assessment, authorization, and readiness for materiel release.

The ideal candidate brings strong technical expertise in software assurance and application security, with the ability to analyze complex software systems, identify and assess security weaknesses, and develop effective risk-mitigation solutions.

Requirements

• Strong technical expertise in software assurance and application security.
• Ability to analyze complex software systems, identify and assess security weaknesses, and develop effective solutions to mitigate risk.

Responsibilities

• Plan and execute complex application security investigations and testing, including SAST, DAST, IAST, fuzzing, and penetration testing.
• Analyze source code and compiled binaries to identify security flaws and map findings to CWEs and CVEs.
• Develop and apply advanced methods, theories, and research techniques to investigate and solve complex software security problems.
• Coordinate software engineers, development teams, and technical support staff on assigned SwA projects, integrating security throughout the SDLC.
• Plan, conduct, and technically direct major phases of significant SwA projects to help ensure software meets safety and security standards required for materiel release.
• Review technical products and their implementation to ensure vulnerability remediations are effective and compliant with current security practices.
• Evaluate vendor capabilities and commercial or open-source SwA tools as needed to provide security testing products or services.
• Review literature, patents, and current practices relevant to application security projects and threat landscapes.
• Provide technical consultation to other organizations on secure coding practices and, as needed, provide work leadership to lower-level employees.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed