Software Engineer - Security Verification Test ﴾SVT﴿

Prodigy One•Annapolis Junction, MD

About The Position

This role supports the security architecture and engineering efforts for a large, complex program operating within a geographically distributed enterprise environment. The position requires a highly skilled cybersecurity professional responsible for ensuring that system security requirements are clearly defined, effectively implemented, and continuously maintained throughout the system lifecycle. The selected candidate plays a key role in designing and validating secure architectures for large-scale systems, major components, and interconnected environments. This includes implementing appropriate security frameworks and solutions to ensure consistent application of enterprise security policies, as well as developing technical standards and recommendations aligned with both current and future security architectures. The role involves proactively identifying, assessing, and mitigating system security risks and threats, while contributing to security planning, risk analysis, certification, and continuous monitoring activities. The candidate evaluates system implementations against applicable compliance frameworks, recommends enhancements, and ensures alignment with customer-defined security requirements. Responsibilities also include analyzing the security impact of new development, reviewing and testing critical software, and identifying and remediating vulnerabilities across the enterprise. In close collaboration with system engineering, test, integration, and development teams, the candidate ensures that hardware and software architectures meet stringent security requirements. The role further includes auditing system configurations, managing configuration control for security-relevant components, and enforcing security policies, standards, and methodologies across distributed systems. Additionally, the candidate serves as a Subject Matter Expert in security architecture, providing guidance to program managers, customer stakeholders, and internal teams. This position requires active participation in Agile processes, including Program Increment Planning, and strong collaboration across cross-functional teams. The role also supports risk management, security control assessments, continuous monitoring, and broader information assurance activities, while contributing to security testing efforts and promoting awareness of vulnerabilities, attack vectors, and mitigation strategies.

Requirements

Must have demonstrated experience with Java.
In‐dept experience or familiarity with multiple the following: Java/JEE, Python, C/C++, SQL, SOAP, WSDL, WADL, PERL, PowerShell, VBS, Eclipse, Postgres, Oracle, Jenkins.
Experience with Web Application User Interface Development, knowledge of databases and structures, and/or experience working with JSON, HTML, XML, XSLT.
Experience with technologies underlying cryptographic systems ﴾symmetric and asymmetric cryptography, ASN.1 encoding, XML canonicalization, digital signatures﴿
Experience developing on Windows, and/or Linux operating systems.
Must have documented professional experience with web services.
Must have a strong understanding of sound software development principles and practices.
Must be able to plan and prioritize personal tasking and be able to communicate effectively verbally and in writing.
Must be an independent thinker, capable of performing high quality work, both independently and with a team in a fast‐moving environment.

Nice To Haves

Bachelor's degree in Computer Science or a related discipline and at least 8 years of relevant experience.
Experience with high level requirements management including requirements decomposition, secure systems engineering and development, trade‐off analysis, interface control, and testing and continuous integration.
Experience in software development on Agile teams using Agile Developer practices such as Pair Programming, TDD, Refactoring, and ATDD.
Developing/integrating with custom defined Domain Specific Languages ﴾DSL﴿.
Implementing structures in a scripting language that can be interpreted by a DSL.
Experience with Object Software Modeling tools.
Experience with developing real‐time embedded software.
Experience with the following: JEE ﴾EJB, JPA, JTA, JAX‐B, JAX‐RS, JAX‐WS﴿, SQL, application servers ﴾Tomcat, WebLogic, JBoss﴿, scripting.
Experience with FITNesse, Mockito, Cucumber, Unified Functional Tester ﴾UFT﴿, Selenium.
Experience with Behavior Driven Development ﴾BDD﴿.
Secure Software development ﴾i.e., Layer 7 Policy﴿
Experience with the Scaled Agile Framework ﴾SAFe﴿ methodology, SAFe Agilest Certification, or experience as a member of an agile team.
Additional experience in J2EE, Python, C/C++, SQL, SOAP, WSDL, Postgres, Oracle, Mongo, PowerShell a plus.

Responsibilities

Designing and validating secure architectures for large-scale systems, major components, and interconnected environments.
Implementing appropriate security frameworks and solutions to ensure consistent application of enterprise security policies.
Developing technical standards and recommendations aligned with both current and future security architectures.
Proactively identifying, assessing, and mitigating system security risks and threats.
Contributing to security planning, risk analysis, certification, and continuous monitoring activities.
Evaluating system implementations against applicable compliance frameworks and recommending enhancements.
Analyzing the security impact of new development, reviewing and testing critical software, and identifying and remediating vulnerabilities across the enterprise.
Ensuring that hardware and software architectures meet stringent security requirements.
Auditing system configurations, managing configuration control for security-relevant components, and enforcing security policies, standards, and methodologies across distributed systems.
Serving as a Subject Matter Expert in security architecture, providing guidance to program managers, customer stakeholders, and internal teams.
Actively participating in Agile processes, including Program Increment Planning, and strong collaboration across cross-functional teams.
Supporting risk management, security control assessments, continuous monitoring, and broader information assurance activities.
Contributing to security testing efforts and promoting awareness of vulnerabilities, attack vectors, and mitigation strategies.