> Markdown version of [/jobs/ext/2399657-software-security-engineer](https://www.wearedevelopers.com/jobs/ext/2399657-software-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Software Security Engineer

- **Company:** Booz Allen Hamilton Inc.
- **Location:** Colorado Springs, CO, United States
- **Salary:** $55,200.0 - $126,000.0
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Application Programming Interfaces (APIs), Agile Methodology, Artificial Intelligence, User Authentication, Cloud Computing Security, Cloud Engineering, Cyber Security, Information Systems, Scrum Methodology, Software Vulnerability Management, Software Security, Git, SC Clearance, Kubernetes, Information Technology, Software Version Control, Devsecops, Serverless Computing, Static Application Security Testing, Programming Languages, Microservices, Dynamic Application Security Testing
- **Published:** August 10, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=6700b1ae18a94fff

## About the Role

* Experience effectively managing multiple priorities
 * Ability to use a programming language to solve problems without the use of AI
 * Ability to break down problems into manageable pieces and iterate on a problem solving process
 * Ability to obtain a Secret clearance
 * Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or Engineering

Nice If You Have:

 * Experience utilizing application security tools such as SAST, DAST, SCA, IaC scanning, container security, API security, secrets detection, and sof tware composition analysis
 * Experience with Git distributed version control
 * Experience with Agile, Scrum, and DevSecOps operating models
 * Experience in cybersecurity, application security, cloud security, cloud engineering, or sof tware engineering
 * Knowledge of sof tware supply chain security concepts, including SBOMs, dependency management, code signing, artifact integrity, and secure build pipelines
 * Knowledge of secure sof tware develop ment principles, modern application architectures, and modern sof tware architectures, including cloud-native, microservices, APIs, containers, Kubernetes, and serverless environments
 * Knowledge of authentication, authorization, cryptography, API security, and cloud security
 * Knowledge of vulnerability management processes, risk prioritization met hodologies, and remediation workflows
 * Knowledge of industry frameworks such as NIST SSDF, NIST AI RMF, and MITRE ATT & CK
 * Ability to quickly learn new skills independently to solve a complex problem

## Description

Integrates security practices throughout the sof tware develop ment lifecycle to enhance and maintain the security posture of sof tware. Applies basic principles, theories, and concepts, and limited industry knowledge. Solves routine problems of limited scope and complexity and refers more complex issues to higher levels. Works under direct supervision.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94)
- [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)