> Markdown version of [/jobs/ext/4454585-sr-software-developer](https://www.wearedevelopers.com/jobs/ext/4454585-sr-software-developer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr Software Developer

- **Company:** Scientific Research Corporation
- **Location:** San Antonio, TX, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Xacta, Java (Programming Language), Bash Shell, Command-Line Interface, Cyber Security, Computer Programming, Continuous Delivery, Continuous Integration, Gradle, Python (Programming Language), PostgreSQL, Linux Servers, Red Hat Enterprise Linux, Ansible, SAP (Applications), Security Content Automation Protocol, Software Engineering, SonarQube, Delivery Pipeline, Git, Containerization, Selinux, Information Technology, Tenable Nessus, Cyber Warfare, Docker, Plan of Action and Milestones, Static Application Security Testing, Vulnerability Analysis
- **Published:** October 2, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=3a5a5e09ad248d9c

## About the Role

* Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, Software Engineering or STEM discipline with 4 years of additional equivalent professional experience
 * CASP+ (SecurityX), CGRC (formerly CAP), CISSP, CISM, CCISO, or equivalent
 * Red Hat Enterprise Linux (RHEL 8/9) administration, command-line operations, system service management, and SELinux configuration
 * Ability to work independently while leveraging a team of diverse specialties

Desired Skills:

 * Direct hands-on experience running ACAS / Tenable Nessus vulnerability scans and interpreting STIG Viewer / SCAP results
 * Experience drafting or maintaining System Security Plans (SSPs) and navigating Xacta or eMASS
 * Working knowledge of Joint and USAF doctrine, specifically defensive cyber operations
 * Experience in programming and system design
 * Prior experience supporting AF-SCI or NSANet-connected systems.
 * Active CASP+ (SecurityX) or CISSP certification
 * Direct experience writing Ansible playbooks to automate DISA STIG remediation (e.g., automated STIG lockdown scripts)
 * Familiarity with database administration, access controls, and STIG checklist validation for PostgreSQL
 * Demonstrated familiarity with NIST SP 800-53 Rev. 5, NIST SP 800-37, and DoD/CNSSI security directives
 * Demonstrated experience deploying and securing containerized applications using Docker and Kubernetes (or Podman)

## Description

* Providing support to a specialized team in the development of advanced analysts for the Joint Staff to be fielded in the next 2-5 years. Work will be at the 16th Air Force in San Antonio, Texas
 * Designing, testing, and applying automated baseline hardening scripts (Ansible playbooks, Bash, Python) to enforce DISA Security Technical Implementation Guides and Security Requirements Guides across five on-premises RHEL Linux servers, PostgreSQL instances, and container platforms
 * Partnering with Java/Python streaming analytics developers to embed automated security testing into Continuous Integration and Continuous Delivery or Deployment pipelines (Git, Gradle), implementing Static Application Security Testing (SAST) and Software Composition Analysis (SCA) via SonarQube or comparable tools
 * Packaging, deploying, and securing application containers utilizing Docker and Kubernetes; validating container image provenance, eliminating baseline CVEs, and configure secure container runtimes
 * Using experience in Assessment & Authorization (A&A) developing, maintaining, and updating core RMF security packages-including System Security Plans (SSP), Continuous Monitoring (ConMon) plans, and Security Assessment Plans (SAP)-within the Xacta eGRC portal
 * Executing routine vulnerability scans using ACAS (Tenable Nessus) and Security Content Automation Protocol (SCAP) compliance benchmarks across the five-server enclave; analyzing findings, eliminating false positives, and coordinating patch cycles
 * Required to formulate actionable Plan of Action & Milestones (POA&M) entries for identified non-compliant controls, working closely with system engineers to resolve findings and mitigate operational risk