Cybersecurity Engineer - Application/Software Security (TS/SCI)

Inc. (dsa)
Charlottesville, VA, United States
1 day ago
Apply on jobs.localjobnetwork.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
5 years minimum
Compensation
$140,000 - $170,000
Working hours
Regular working hours

Tech stack

Java (Programming Language) JavaScript (Programming Language) Application Programming Interfaces (APIs) Amazon Web Services Software System Penetration Testing Application Testing Burp Suite C Sharp (Programming Language) Code Review CompTIA Security+ Cyber Security Databases
+28 more
Extract Transform Load (ETL) Data Systems Relational Databases Python (Programming Language) PostgreSQL Open Source Technology Oracle (Applications) Open Web Application Security Comptia Pentest+ CE Fortify (Software) Red Team (Cyber Security) Microsoft Copilot Software Engineering SonarQube SQL Databases Systems Integration Web Testing Software Security Mitre Att&ck Backend Gitlab GWAPT Information Technology Checkmarx Jenkins Static Application Security Testing Golang Dynamic Application Security Testing

Job description

All hired employees are expected to have experience with Microsoft Copilot and / or an approved equivalent AI solution., Data Systems Analysts, Inc. (DSA) is seeking a TS/SCI-cleared Cybersecurity Engineer (Application Security) to secure the software that supports mission-critical systems in a secure DoD environment. The selected candidate will own software security within the cyber engineering team, testing applications, reviewing code, validating vulnerabilities, and making sure the right security tools and processes are in place.

The Cybersecurity Engineer will work closely with engineers, architects, ISSOs, and ISSMs to translate security requirements into practical technical solutions and confirm that security tools are sufficient. This role suits professionals with a software development background who moved into application security, penetration testing, or offensive cyber., * Own software security within the cyber engineering team, providing technical guidance on securing applications, APIs, and back-end services.

  • Perform security testing of applications and validate that fixes resolve identified findings.
  • Review source code against secure coding standards to identify vulnerabilities, insecure design, and exploitable weaknesses.
  • Implement, tune, and maintain software security tools (SAST, DAST, dependency and container scanning) and integrate them into development and release processes.
  • Evaluate open-source and commercial cyber tools and source code to determine fit, security risk, and what can be adapted to meet mission requirements.
  • Partner with engineers, system admins, architects, ISSOs, and ISSMs to define security requirements and confirm tools and controls are sufficient.
  • Assess risk from major software changes, unpatched components, and software reaching end of support.
  • Apply adversary techniques (such as MITRE ATT&CK) and threat modeling to prioritize findings by real-world impact.
  • Document independent test results, release risk, and technical evidence supporting RMF and ATO activities.
  • Communicate software risks, findings, and practical fixes to technical teams, system owners, and leadership.

Requirements

  • BS degree in Computer Science, Software Engineering, Computer Information Systems, Cybersecurity, or related field
  • Experience may be substituted for degree.
  • TS/SCI Clearance
  • CompTIA Security+ (DoD 8140 compliant), * Minimum 5 years of combined experience in software development, application security, penetration testing, or secure software assessment.
  • Hands-on software development experience in at least one language such as Python, Java, C#, Go, or JavaScript, with an understanding of back-end services, APIs, and databases.
  • Demonstrated experience finding and validating software vulnerabilities through code review, security testing, or technical assessment.
  • Working knowledge of common application weaknesses (OWASP Top 10, CWE), how they are exploited, and how to fix them.
  • Ability to assess exploitability and impact, and communicate clear, practical fixes to engineers and compliance staff.
  • Ability to work independently as the primary software security resource on a cybersecurity team.

Preferred Experience/Qualifications:

  • GWAPT, OSCP, OSWE, CSSLP, PenTest+, CySA+, SecurityX/CASP+, CEH, CISSP, or other relevant certification.
  • Experience with SAST/DAST tools such as Fortify, SonarQube, Checkmarx, Burp Suite, or OWASP ZAP.
  • Penetration testing, red team, or web application testing experience.
  • Experience integrating security checks into CI/CD pipelines (GitLab, Jenkins).
  • Experience with SQL and relational databases (Oracle, PostgreSQL) and ETL workflows.
  • Familiarity with containers, AWS/GovCloud, software supply chain security, or SBOMs.
  • Familiarity with RMF, NIST SP 800-53, eMASS, and the DISA Application Security and Development STIG.
  • Experience supporting DoD, U.S. Army, or Intelligence Community missions.

Benefits & conditions

The posted salary range is a good-faith estimate. Actual compensation will be based on the selected candidate’s qualifications, experience, skills, and other job-related factors.

DSA - Salary Pay Range

$140,000</bdi> - $170,000</bdi> USD</bdi>

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on jobs.localjobnetwork.com
Prepare application

Good distractions

Loading talks and stories from around this role…