Job SummaryBattelle is a world leader in science and technology services and research. The Cyber Innovations Unit, Cyber Architecture & Advisory Services Practice of the National Security Global Business division specializes in providing advanced information assurance (IA) solutions to our government and commercial clients. The Cyber Architecture & Advisory Services is seeking an Application Security Engineer to work under the direction of an Application Security Subject Matter Expert (SME) in support of multiple DHS S&T Research, Development, & Innovation (RD&I) efforts. The Application Security Engineer will conduct Independent Verification and Validation (IV&V) of mission critical software applications protecting the homeland's Land, Sea (Maritime), Air, Space, and Cyberspace domains.
This quick fill position is located at DHS St. Elizabeth's Campus, Washington DC, Battelle Crystal City Office, and remote locations. Compensation will be based on qualifications and experience. The selected candidate will be expected to travel up to 5% of the time.
Responsibilities - Evaluate and analyze application software and firmware source code and binaries for exploitable weaknesses
- Utilize application security testing tools to identify potential vulnerabilities
- Conduct Static Application Security Testing (SAST) on source code repositories and executable binaries
- Research exploitation methods and develop exploits for identified vulnerabilities
- Write vulnerability remediation recommendations, including updates, source code corrections, or other mitigations
- Write in-depth software security reports that include summarized findings and describe the risks
- Present findings to software development teams
- Brief assessment results to senior leadership and executives
Other job responsibilities :
- Reverse engineer application software and firmware binaries when required under the guidance of the Senior Application Security Engineer
- Evaluate and analyze leading edge security technologies to be implemented to improve the organization's security posture.
- Work with research and development (R&D) organizations to define requirements to design and develop leading-edge security solutions.
- Collaborate with fellow Cyber Security Practice Team Members both locally and across the Cyber Security Practice in the full-lifecycle development and delivery of security technology solutions.
- Actively contribute to the Battelle Cyber process improvement initiatives
- Actively participate in leading edge cyber security conferences, working groups and training
Key Qualifications - Active DoD SECRET Clearance or DHS "Enter on Duty" (EOD) or "Full Suitability Approval" (FSA) Background Investigation status; US Citizenship required
- 5+ years software engineering experience with compiled and interpretive programming languages.
- 4+ years of experience in information assurance and/or cybersecurity
- Bachelors Degree (BS/BA)
- Experience with decompiling and reverse engineering tools such as Ghidra and JDecompiler
- Experience with SAST tools such as Black Duck Coverity
- Experience with software composition analysis tools such as Anchore Syft
- Familiarity with Software Bills of Materials (SBOMs)
- Experience with virtual machines
- Experience with common Linux distributions, such as Ubuntu and Red Hat
- Experience programming in Java, C/C++, C#/.NET, Python, and JavaScript
- Proven experience working in collaborative sessions demonstrating strong verbal and written communication skills along with tactful negotiation skills
Certified Information Systems Professional (CISSP)
Preferred Qualifications - Current DHS Security Suitability
- M.S. in Information Systems or related field
- Certified Secure Software Lifecycle Professional (CSSLP)
- Experience with Ruby, Rust, Go, TypeScript, and PHP
- Experience with Continuous Integration / Continuous Development (CI /CD) Pipelines
- Penetration Testing experience and/or certifications
- Experience with C-UAS, Sea (Maritime), Air, and/or Border operations and DHS systems
- Experience with IT Security Engineering in support of systems development, interface, and/or architecture requirements and concepts
- Familiarity with MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) Framework
- Familiarity with NIST SP 800-53 Rev. 5
- Familiarity with DHS 4300A
- Experience with cloud application security
- Experience with cloud environment operations
- Consulting environment experience
- Military veteran with relevant Application Security, IT and computer security experience will be considered a plus.
Compensation Data Battelle is committed to fair and equitable compensation practices. The salary range for this role is $130,000 - $190,000 per year, in addition to our comprehensive benefits package. A candidate's salary is determined by various factors, including but not limited to education, relevant work experience, skills, and certifications. Salary ranges may vary based on geographic location and market conditions.
Benefits: Live an Extraordinary LifeWe care about your well-being, not just on the job. Battelle offers comprehensive and competitive benefits to help you live your best life.
- Balance life through a compressed work schedule: Most of our team follows a flexible, compressed work schedule that allows for every other Friday off-giving you a dedicated day to accomplish things in your personal life without using vacation time.
- Enjoy enhanced work flexibility, including a hybrid arrangement: You have options for where and when you work. Our Together with Flexibility model allows you to work 60% in-office and 40% remote, with Monday and Tuesday as common in-office days, dependent on team and position needs .
- Take time to recharge: You get paid time off to support work-life balance and keep motivated.
- Prioritize wellness: Stay healthy with medical, dental, and vision coverage with wellness incentives and benefits plus a variety of optional supplemental benefits.
- Better together: Coverage for partners, gender-affirming care and health support, and family formation support.
- Build your financial future: Build financial stability with an industry-leading 401(k) retirement savings plan. For most employees, we put in 5 percent whether you contribute or not, and match your contributions on top of that.
- Advance your education: Tuition assistance is available to pursue higher education.
