Sr Software Engineer - DevSecOps/Cyber focus
General Dynamics - Rockville, MD
posted 2 months ago
About the position
As a Senior Software Engineer with a focus on DevSecOps and Cybersecurity, you will play a crucial role in ensuring that our products are free from security vulnerabilities. You will be responsible for designing, deploying, operating, and maintaining secure Cloud products and services within a Cloud-based environment. This will enable development teams to deliver features efficiently while adhering to security best practices. Your work will directly support the mission of the Department of Defense, contributing to the safety and security of our nation. In this position, you will lead a team of developers tasked with building new web applications and supporting existing ones. You will collaborate with developers, data engineers, and data scientists to create applications that manage data in support of Internet and social media activities. Utilizing Agile project management methodologies, you will oversee all aspects of the software development lifecycle (SDLC), ensuring that projects are delivered on time and meet quality standards. Your responsibilities will include developing web applications using Ruby on Rails or Django/Python, deploying them in AWS, and utilizing MySQL and RedShift databases. You will also be involved in database engineering, providing Python support through AWS Lambda, and ensuring the integrity and protection of networks, systems, and applications by enforcing organizational security policies. Regular system audits and vulnerability assessments will be part of your duties, as well as reviewing code for security compliance and safeguarding the network against unauthorized access. Additionally, you will monitor and analyze Intrusion Detection Systems (IDS) to identify security issues, prepare incident reports, and ensure compliance with regulations and privacy laws. As a senior member of the team, you may also coach less-experienced professionals and serve as a team or task lead, guiding the direction of projects and initiatives.
Responsibilities
- Work with a team of developers, data engineers, and data scientists to create web applications to collect and manage data in support of Internet and social media activities.
- Participate in Agile project management methodologies to support all aspects of the software development lifecycle (SDLC).
- Work within a team environment using Confluence, Jira, and Slack to manage, assign, and collaborate on work tasks.
- Develop web applications in Ruby on Rails or Django/Python on Linux and deploy them in AWS using MySQL and RedShift databases.
- Review projects' ability to deliver robust and scalable solutions, learning and incorporating new technologies as appropriate.
- Support database engineering by providing Python support using AWS Lambda.
- Build and operate scalable and secure systems on AWS.
- Develop, implement, communicate, and enforce security policies or plans for data, software applications, hardware, telecommunications, and information systems.
- Ensure the integrity and protection of networks, systems, and applications by technical enforcement of organizational security policies, through monitoring and reporting.
- Perform periodic and on-demand system audits and vulnerability assessments to verify systems are being operated securely and information systems security policies and procedures are being implemented as defined in security plans.
- Review code for security and compliance with coding standards.
- Safeguard the network against unauthorized infiltration, modification, destruction, or disclosure.
- Assist with the implementation of countermeasures or mitigating controls.
- Conduct investigations of information systems security violations and incidents, reporting as necessary to management.
- Monitor and analyze Intrusion Detection Systems (IDS) to identify security issues for remediation; recognize potential, successful, and unsuccessful intrusion attempts and compromises through reviews and analyses of relevant event detail and summary information.
- Prepare incident reports.
- Ensure compliance with regulations and privacy laws.
- Be responsible for DevSecOps of project applications supporting the customer.
- May coach and provide guidance to less-experienced professionals.
- May serve as a team or task lead.
Requirements
- EDUCATION: BA/BS in Computer Science or related field.
- EXPERIENCE: 5+ years of relevant experience.
- CLEARANCE: Must be able to obtain Secret Clearance; current DoD Secret clearance preferred.
Benefits
- Salary range of $106,250 - $143,750 based on experience and location.
- Comprehensive benefits package including health insurance, retirement plans, and paid time off.
