Software Security Engineer

Booz Allen Hamilton•Rome, NY

1d•$69,300 - $158,000

About The Position

As a Software Security Engineer at Booz Allen, you will help identify and exploit software vulnerabilities before adversaries can, applying security practices throughout the software development lifecycle to enhance and maintain software security. You will apply functional and industry knowledge and contribute to solutions for problems of moderate scope and complexity. You will work with a collaborative team to assess and analyze software for vulnerabilities and determine whether risks are acceptable for use in the DoD arena. You will use knowledge of the software lifecycle and secure development practices to build security into applications, working closely with developers and information assurance engineers on verification and validation. From an adversarial perspective, you will qualify risks and, under general supervision, plan, conduct, and deliver assignments. The role supports clients and national security through cyber capabilities.

Requirements

Experience with Java, JavaScript, C, C++, or Python.
Experience with Information Assurance or cybersecurity requirements.
Knowledge of NIST, RMF, or DoD requirements.
Knowledge of software development or programming.
Ability to manage competing priorities.
Secret clearance.
High school diploma or GED.
DoD 8140-compliant Intermediate or DoD 8570-compliant IAT Level II certification, such as Security+ or CISSP.

Nice To Haves

Experience working through the Software Development Life Cycle (SDLC).
Experience with VMware and virtual test environments, and Linux and Windows operating systems.
Experience with Static Code Analysis tools, including Fortify or OpenText.
Experience with vulnerabilities and source code bugs.
Knowledge of industry best-practice methodologies in software security, and reporting on testing results and appropriate countermeasures.
Knowledge of Static Code Analysis and performing code reviews, with and without a static code analyzer, for security vulnerabilities and applying industry best practices.
Ability to work in a team environment and demonstrate a passion for learning.
Excellent writing and communication skills, and analytical and technical problem-solving skills.
Top Secret clearance.
Bachelor's degree in Computer Science, Information Science, or a related field.

Responsibilities

Assess and analyze software for vulnerabilities and determine whether risks are acceptable for use in the DoD arena.
Apply secure software development practices throughout the software lifecycle to build security into applications.
Work with developers and information assurance engineers to support verification and validation.
Examine software applications from an adversarial perspective to qualify risks.
Plan, conduct, and deliver assignments under general supervision.
Contribute to solutions for problems of moderate scope and complexity.