Cybersecurity Software Security Assessor

Rothe Development - Huntsville, AL

Full-time

Huntsville, AL

Professional, Scientific, and Technical Services

About the position

Rothe Development, Inc. is seeking a cybersecurity software security assessor to join our cyber compliance and risk assessment team, specifically supporting our Nation's ballistic missile defense program. This role is critical in ensuring the security and integrity of software solutions used within Government information systems. The individual in this position will be responsible for performing comprehensive software security and risk assessments on a variety of software types, including custom software solutions, Government-off-the-Shelf (GOTS), Commercial off-the-Shelf (COTS), and Open Source Software (OSS). These assessments are vital for identifying potential vulnerabilities and ensuring compliance with security standards. The cybersecurity software security assessor will provide essential support for the verification and validation of software assurance artifacts. This includes conducting code scans and performing threat analyses to identify and mitigate risks associated with software applications. The position offers opportunities for on-site work at Redstone Arsenal in Huntsville, AL, as well as at Schriever Space Force Base in Colorado Springs, CO. The ideal candidate will possess a strong background in software security and risk assessment methodologies, along with a commitment to maintaining the highest standards of cybersecurity in support of national defense initiatives.

Responsibilities

• Perform software security and risk assessments on custom software solutions, GOTS, COTS, and OSS.
• Conduct verification and validation of software assurance artifacts, including code scans and threat analyses.
• Identify vulnerabilities and recommend mitigation strategies for software applications.
• Collaborate with development teams to integrate security practices into the software development lifecycle.
• Stay updated on the latest cybersecurity threats and trends to enhance assessment methodologies.

Requirements

• Bachelor's degree in Computer Science, Information Systems, or a related field.
• DoD IAT Level II or III equivalent certification such as Security+, SSCP, CASP+, CISA, CISSP, GCED, or GCIH.
• Experience with OWASP and static and dynamic software analysis techniques.
• Proficiency in common software security tools such as Fortify.
• Knowledge of one or more general-purpose programming languages such as Java, C, C++, C#, or Python.
• Familiarity with scripting languages and environments (e.g., Bash, PowerShell).
• Basic understanding of DevSecOps principles and technical environments/tools including CI/CD pipelines, containerization, and microservices.
• Understanding of the software development lifecycle and common agile management methodologies.
• Familiarity with cloud computing environments such as AWS, Azure, and Google Cloud Platform.