Software Assurance Engineer

About the position

The Software Assurance Engineer at Millennium Corporation plays a critical role in ensuring the security of IT systems and platforms. This position involves collaborating with various teams to implement security solutions, conducting application security assessments, and integrating security into the software development lifecycle (SDLC). The engineer will also be responsible for analyzing cybersecurity requirements, executing threat model development, and maintaining software assurance metrics.

Responsibilities

• Partner with program management, engineering, and accreditation security specialists to ensure required security solutions and controls are in place throughout all IT systems and platforms.
• Articulate security remediation advice related to web, rich client, services, or mobile development languages and frameworks to development and testing teams.
• Analyze and define Cybersecurity requirements throughout the entire Program Life Cycle from early requirements definition through delivery, operations, and decommissioning.
• Integrate security into various development methodologies and approaches within the SDLC.
• Execute expert-level application security assessments to identify, recreate, and remediate security defects.
• Implement and execute Threat Model development and analysis.
• Explain security issues and remediation approaches to project and development staff, leveraging knowledge of OWASP and secure coding practices.
• Conduct software/application/system integration design and testing.
• Utilize knowledge of HTTP, REST, SOAP, XML, and JSON in relation to client and server-side web applications.
• Perform static and dynamic code analysis using manual methodologies and automated tools.
• Develop and maintain software assurance metrics, trend analysis, and reporting to prioritize and track security issues.
• Assist with Business Development activities to support Millennium's strategic objectives.

Requirements

• Active secret clearance is required.
• Bachelor's degree and 8 years of engineering, computer science, or information technology experience including at least 3 to 6 years of Cybersecurity experience, or a High School Diploma with 13 years of experience including at least 1 year in cybersecurity.
• Experience in DoD Risk Management Framework (RMF).
• IAM Level II certification is required.
• Experience in Software Assurance, code analysis, and remediation of security defects.

Nice-to-haves

• Familiarity with the development of Security Authorization Packages or past experience with DoD Assessment & Authorization (A&A).
• Experience in business development activities such as technical interviews and proposal writing.

Benefits

• Competitive salary
• Health insurance
• 401k plan
• Paid time off
• Professional development opportunities