Software Security Engineer

Booz Allen Hamilton•San Antonio, TX

1d•$55,200 - $126,000

About The Position

Integrates security practices throughout the software development lifecycle to enhance and maintain the security posture of software. Applies basic principles, theories, and concepts, and limited industry knowledge. Solves routine problems of limited scope and complexity and refers more complex issues to higher levels. Works under direct supervision.

Requirements

Experience effectively managing multiple priorities
Ability to use a programming language to solve problems without the use of AI
Ability to break down problems into manageable pieces and iterate on a problem solving process
Ability to obtain a Secret clearance
Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or Engineering

Nice To Haves

Experience utilizing application security tools such as SAST, DAST, SCA, IaC scanning, container security, API security, secrets detection, and software composition analysis
Experience with Git distributed version control
Experience with Agile, Scrum, and DevSecOps operating models
Experience in cybersecurity, application security, cloud security, cloud engineering, or software engineering
Knowledge of software supply chain security concepts, including SBOMs, dependency management, code signing, artifact integrity, and secure build pipelines
Knowledge of secure software development principles, modern application architectures, and modern software architectures, including cloud-native, microservices, APIs, containers, Kubernetes, and serverless environments
Knowledge of authentication, authorization, cryptography, API security, and cloud security
Knowledge of vulnerability management processes, risk prioritization methodologies, and remediation workflows
Knowledge of industry frameworks such as NIST SSDF, NIST AI RMF, and MITRE ATT&CK
Ability to quickly learn new skills independently to solve a complex problem

Responsibilities

Integrates security practices throughout the software development lifecycle to enhance and maintain the security posture of software.
Applies basic principles, theories, and concepts, and limited industry knowledge.
Solves routine problems of limited scope and complexity and refers more complex issues to higher levels.
Works under direct supervision.