Software Security Engineer

Booz Allen Hamilton•Rome, NY

19h•$69,300 - $158,000•Onsite

About The Position

As a Software Security Engineer at Booz Allen, you will help protect software from evolving threats by identifying and exploiting vulnerabilities and strengthening software security throughout the development lifecycle. You will support clients by assessing and analyzing software vulnerabilities and determining whether risks are acceptable for use in the DoD arena. Working collaboratively with developers and information assurance engineers, you will apply secure software development practices and help ensure adequate verification and validation. You will examine applications from an adversarial perspective, qualify risks, and plan, conduct, and deliver assignments under general supervision. The role involves applying functional and industry knowledge to solutions for problems of moderate scope and complexity, contributing to national security through cyber capabilities.

Requirements

Experience with Java, JavaScript, C, C++, or Python.
Experience with Information Assurance or cybersecurity requirements.
Knowledge of NIST, RMF, or DoD requirements.
Knowledge of software development or programming.
Ability to manage competing priorities.
Secret clearance.
High school diploma or GED.
DoD 8140 Compliant Intermediate or DoD 8570 Compliant IAT Level II certification, such as Security+ or CISSP.

Nice To Haves

Experience working through the Software Development Life Cycle (SDLC).
Experience with VMware and virtual test environments, and Linux and Windows operating systems.
Experience with Static Code Analysis tools, including Fortify or OpenText.
Experience with vulnerabilities and source code bugs.
Knowledge of industry best-practice methodologies in software security and reporting testing results and appropriate countermeasures.
Knowledge of Static Code Analysis and performing code reviews, with and without a static code analyzer, for security vulnerabilities and applying industry best practices.
Ability to work in a team environment and demonstrate a passion for learning.
Excellent writing and communication skills, and analytical and technical problem-solving skills.
Top Secret clearance.
Bachelor's degree in CS, Information Science, or a related field.

Responsibilities

Assess and analyze software for vulnerabilities to determine whether risks are acceptable for use in the DoD arena.
Apply knowledge of software lifecycles and secure software development practices to build security into software applications.
Work with developers and information assurance engineers to ensure adequate verification and validation.
Examine software applications from an adversarial perspective and qualify risks.
Plan, conduct, and deliver assignments under general supervision.
Contribute to solutions for problems of moderate scope and complexity.