> Markdown version of [/jobs/ext/3965624-open-source-software-security-sme](https://www.wearedevelopers.com/jobs/ext/3965624-open-source-software-security-sme). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Open-Source Software Security SME

- **Company:** ECS Federal, LLC.
- **Location:** Washington, DC, United States
- **Experience:** Expert
- **Salary:** $185,000.0 - $235,000.0
- **Contract:** Permanent contract
- **Skills:** Reference Implementation, Artificial Intelligence, Cyber Security, Information Systems, Internet Security, Open Source Technology, Secure Coding, Security Software, Software Engineering, Software Vulnerability Management, Software Security, Information Technology, Cybercrime, Free and Open-Source Software, Vulnerability Analysis
- **Published:** October 27, 2026
- **Apply:** https://www.careerbuilder.com/job-details/open-source-software-security-sme-washington-dc--c628c96c-4259-40e4-9644-6039dadf65e9

## About the Role

Open Source, Open Source, Security Software, CISA - Certified Information Systems Auditor, Operational Support Systems (OSS), Internet Security, Security Analysis, Software Development, Computer Security, Analysis Skills, * US citizenship with ability to obtain and maintain DHS Suitability (EOD).

 * Bachelor's degree in computer science, Cybersecurity, Software Engineering, or related technical field
 * Minimum of 8 years' professional experience in software development, cybersecurity, or related technical roles
 * At least 8 years of hands-on experience in open-source software security, application security, or vulnerability research
 * Experience in open-source software security, vulnerability analysis, and software development.
 * Demonstrated experience developing, testing, and contributing code to production software systems, and open-source projects.
 * Knowledge of secure development practices, dependency management, SBOMs, and software supply chain security.
 * Experience using AI-assisted development or security tools and validating their results.
 * Strong communication skills and ability to work across technical teams.
 * 10+ years of professional experience in software security, with at least 7 years in open-source security
 * Experience supporting CISA, DHS, or other federal cybersecurity agencies or programs
 * Previous work with critical infrastructure protection or national cybersecurity initiatives
 * Experience in technical leadership or architect role guiding security strategy
 * Familiarity with Secure by Design initiatives.
 * Experience with an Open-Source Program Office (OSPO) or open-source coding agents.

## Description

* Support CISA's Secure by Design initiatives and engagement with open-source organizations, maintainers, and vendors.
 * Use AI-assisted tools to identify and analyze OSS vulnerabilities, validate findings, and recommend remediation.
 * Assess existing vulnerabilities and identify opportunities for software hardening and modernization.
 * Provide technical guidance on dependency management, Software Bills of Materials (SBOMs), and software supply chain risks.
 * Translate CISA guidance into working tools and software contributions suitable for acceptance into active open-source projects.
 * Contribute code, testing, and documentation to an open-source coding agent used as a reference implementation.
 * Collaborate with vulnerability management, threat hunting, AI, product, and platform engineering teams.
 * Participate in technical pilots and open-source community engagements.

Salary Range: $185,000 - $235,000