SOFTWARE SECURITY ANALYST/DEVELOPER - ACS WEB

Client Server Software Solutions• Remote, US,

13d

About The Position

Serve as Software Security Analyst and developer overseeing/managing the scanning for and resolution of application security vulnerabilities, as needed, while also performing Operation and Maintenance (O&M) software development activities. Work with the team and IRS personnel to ensure that application vulnerabilities are resolved prior to any software release and create plan of action and milestones for vulnerabilities that will not be resolved until a later release. Must understand a large call center environment and the impact on agents processing customers issues and work to improve the agent experience. Strong communication skills to interface with IRS personnel and express complex concepts into manageable actions. Schedule/host developer technical meetings, address issues/propose solutions, provide technical advice, optimize processes, develop work proposals for review/approval, keep Project Manager/Task Lead informed, and develop software code changes/code updates as a productive member of the software development team.

Requirements

Minimum 12 years of software/web development/engineering/optimization using Object Oriented Programming.
Full-stack J2EE (Java17 & 21 required), JavaScript, Spring framework, Spring Boot/Join Faces, PrimeFaces, JQuery, Java Beans, and JSF, or equivalent.
Software development in environments utilizing ECLIPSE (2022 or later), RedHat Linux, Tomcat, HTML5, or equivalent.
Hands-on experience working with security scan software (e.g., Trivy, SonarCube, Qualys, Nexus IQ, etc.) and vulnerability mitigation processes and incident tracking/management.
Experience with Maven, CI/CD Pipelines, GitHub Actions, and OpenShift projects and container management.
Knowledge of IBM mainframe components, including Verastream Bridge Integrator (VBI), CICS.
Strong understanding of mainframe transaction processing.
Strong analytical mindset for defect identification and its resolution.
Active Public Trust/Minimum Background Investigation (MBI) clearance required for this position or eligibility to acquire is mandatory.

Nice To Haves

Hands-on experience using tools/guidance, or equivalent, such as: Jira, Service Now, Selenium test script development, open source logging and iText APIs.
Experience with IRS Enterprise Life Cycle (ELC), OneSDLC, IRM/IRS Security regulations, IRM 2.5 System Development, and 508 Compliance.
Experience with networking fundamentals, development environments, and change control processes.
Familiarity with web interfaces to mainframes, such as IBM Liberty.
Knowledge of IBM Assembler is a plus.
Bachelor of Science in Computer Science or related discipline with a primary focus on software development/engineering is highly desired.
Software development, security, networking, system administration certifications a plus.

Responsibilities

Oversee and manage the scanning for and resolution of application security vulnerabilities.
Perform Operation and Maintenance (O&M) software development activities.
Ensure application vulnerabilities are resolved prior to software release.
Create plans of action and milestones for vulnerabilities not resolved before release.
Understand a large call center environment and its impact on agents and customer issues.
Improve the agent experience.
Interface with IRS personnel and express complex concepts into manageable actions.
Schedule and host developer technical meetings.
Address issues and propose solutions.
Provide technical advice.
Optimize processes.
Develop work proposals for review and approval.
Keep Project Manager/Task Lead informed.
Develop software code changes/code updates.
Conduct unit testing.
Perform peer reviews.
Manage code check-in/check-out procedures.
Perform requirements analysis.
Assess and document level of effort (LOE).
Draft system technical documents (e.g., system design specifications, software user guides, process documentation).
Assist with troubleshooting development/production server problems, networking, and environment configuration.