Software Assurance (SwA) Engineer

COLSA•Huntsville, AL

10d•Onsite

About The Position

COLSA Corporation is seeking an experienced Software Assurance (SwA) Engineer to join our team in Huntsville, Alabama. This role will support the security and integrity of complex software applications throughout the software development lifecycle (SDLC), with a focus on identifying vulnerabilities, conducting application security testing, and supporting software assessment, authorization, and readiness for materiel release. The ideal candidate brings strong technical expertise in software assurance and application security, with the ability to analyze complex software systems, identify and assess security weaknesses, and develop effective solutions to mitigate risk.

Requirements

Experienced Software Assurance (SwA) Engineer
Strong technical expertise in software assurance and application security
Ability to analyze complex software systems
Ability to identify and assess security weaknesses
Ability to develop effective solutions to mitigate risk
Experience with Static Application Security Testing (SAST)
Experience with Dynamic Application Security Testing (DAST)
Experience with Interactive Application Security Testing (IAST)
Experience with fuzzing
Experience with penetration testing
Ability to analyze source code and compiled binaries
Knowledge of Common Weakness Enumerations (CWEs)
Knowledge of Common Vulnerabilities and Exposures (CVEs)
Ability to develop and apply advanced methods, theories, and research techniques
Ability to coordinate efforts of software engineers, development teams, and technical support staff
Ability to plan, conduct, and technically direct major phases of significant SwA projects
Ability to review the completion and implementation of technical products
Ability to evaluate vendor capabilities and commercial/open-source SwA tools
Ability to review literature, patents, and current practices
Ability to provide technical consultation regarding secure coding practices
Ability to provide work leadership to lower-level employees

Responsibilities

Conducts Application Security Testing: Plans and executes investigations and tests of considerable complexity, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Interactive Application Security Testing (IAST), fuzzing, and penetration testing.
Vulnerability Analysis & Remediation: Analyzes source code and compiled binaries to identify security flaws, mapping findings to Common Weakness Enumerations (CWEs) and Common Vulnerabilities and Exposures (CVEs).
Advanced Problem Solving: Develops and applies advanced methods, theories, and research techniques in the investigation and solution of complex and advanced software security problems.
Project Coordination: Coordinates efforts of software engineers, development teams, and technical support staff in the performance of assigned SwA projects, ensuring security is integrated throughout the SDLC.
Materiel Release Support: Plans, conducts, and technically directs major phases of significant SwA projects to ensure software meets the rigorous safety and security standards required for materiel release.
Technical Review: Reviews the completion and implementation of technical products, ensuring that vulnerability remediations are effective and compliant with current security practices.
Tool & Vendor Evaluation: May evaluate vendor capabilities and commercial/open-source SwA tools (e.g., Fortify, Coverity, Semgrep, Cppcheck, etc.) to provide required security testing products or services.
Industry Research: Reviews literature, patents, and current practices relevant to the solution of assigned application security projects and threat landscapes.
Technical Leadership: May provide technical consultation to other organizations regarding secure coding practices and may provide work leadership to lower-level employees.