Bachelor's degree in Computer Science, Engineering, or related field, or equivalent experience.
3+ years of software engineering experience with a strong focus on security.
Proficiency in programming languages such as JavaScript/TypeScript, Python, Go, or C#.
Experience with secure coding practices and frameworks.
Strong understanding of application security principles, including OWASP Top 10 and secure API design.
Familiarity with NIST 800-171, CMMC, or FedRAMP security control requirements.
Hands-on experience with AWS and/or Azure security services.
Responsibilities
Design and develop secure software with a security-first mindset throughout the SDLC.
Apply secure coding standards and conduct architecture reviews to mitigate vulnerabilities.
Automate security gates in CI/CD pipelines for enhanced security checks.
Design secure system architectures for multi-tenant cloud environments.
Implement IAM controls and least-privilege authorization frameworks.
Lead code reviews and manage vulnerability remediation efforts.
Serve as the embedded security champion, mentoring engineering teams on security best practices.
Benefits
Comprehensive health insurance plans.
401(k) retirement plan with company match.
Generous paid time off and holiday schedule.
Professional development opportunities and training.
Collaborative work environment with a focus on innovation.
Full Job Description
Category Software Engineer
Description
***This is NOT a remote position***
Job Description
We are seeking a Security Software Engineer to build and harden software systems supporting DoD programs operating under CMMC/NIST 800-171/FedRAMP compliance requirements. You will embed security across the SDLC-from design and code review through CI/CD and cloud deployment-working alongside engineering, DevSecOps, and IT teams in a regulated, cloud-native environment (AWS Commercial and GovCloud, Azure GCC High).
Responsibilities
Core Engineering & Secure Development
Design and develop secure software with a security-first mindset baked into every phase of the SDLC.
Apply secure coding standards, threat modeling, and vulnerability mitigation aligned to NIST 800-53 and CMMC Level 2/3 controls.
Conduct architecture reviews and code hardening to address OWASP Top 10 and DoD STIGs.
