The Cryptography, ICAM, & System Assurance department is comprised of an inspired multi-disciplinary team of researchers and practitioners driving innovation in the department's technical areas of focus, with particular emphasis in Cryptography; Software Assurance (SwA); and Identity, Credential and Access Management (ICAM). We develop and apply scalable approaches for systems and software, evaluate technology and solutions, lead and foster external partnerships within the communities we support, and conduct novel research and development. We serve in critical roles including:

• Conceive of and advance novel technical ideas,
• Provide deep analyses whose results drive decision-making by our sponsors,
• Build proof-of-concept systems that leverage new technology and concepts, and
• Engage with the vendor community, academia, and our sponsors to raise the bar on cyber security throughout the industry.

Roles & Responsibilities:

As a member of the Cryptography, ICAM, & System Assurance department in the Cyber Engineering Division, you will join an inspired team supporting developers and security researchers around the world. We are seeking a qualified candidate for a technical position involving the application of core capabilities in Software Assurance and Secure Coding, the implementation of these into modern DevSecOps processes, and the integration of AI technologies throughout this constantly changing domain. We are looking for an individual with the hard-to-find combination of hands-on software development and application security practice. The successful candidate will directly contribute to the technical work for our sponsors and take an active role in overall team dynamics and eventual leadership. Expected responsibilities include:

• Providing thought leadership in Software Assurance both within MITRE and for our sponsors,
• Assisting sponsors in implementing Software Assurance best practices within their operational environments,
• Conducting research into novel software/hardware weaknesses and attack patterns,
• Increasing the impact of the CWE program by expanding and improving technical content,
• Performing static analysis on source code to support a range of use cases,
• Researching ways to improve traditional SwA techniques by leveraging the newest AI technologies,
• Implementing prototype systems to manage Software Bill of Materials (SBOMs), and
• Helping to advance related research projects, bringing your unique knowledge to bear.

Basic Qualifications:

• A minimum of 5 years of related experience with a bachelor's degree; or 3 years and a master's degree; or a PhD with relevant experience who can immediately contribute at this job step; or equivalent combination of related education and work experience.
• Experience in secure application development and software assurance
• Knowledgeable about static and dynamic application security testing (SAST/DAST)
• Demonstrated experience collaborating successfully with teams
• Demonstrated examples of building and leveraging relationships that had a positive impact on the work
• Track record of impactful work that made a difference
• Strong analytical and problem-solving skills and proactive, critical thinking skills
• Excellent written/verbal communications skills
• This position requires a Secret Clearance
• Per the U.S. Government's eligibility requirements for a clearance, U.S. Citizenship is required.
• This position requires a minimum of 50% hybrid on-site

Preferred Qualifications:

• Bachelor's degree in computer science, Software Engineering, Cyber Security, or related technical field of study
• Previous experience as a software or cyber security engineer
• Familiarity with cyber security principles, concepts and technologies
• Working knowledge of standards for describing and prioritizing vulnerabilities and weaknesses (i.e., CVE, CVSS, CWE)
• Deep technical understanding of one or more software analysis areas (e.g., static code analysis, symbolic execution, or binary analysis)
• Familiarity with Python, C, C++, C#, Rust, GoLang and other current development languages
• Prior involvement in performing software/hardware design, architecture, and/or code reviews
• Ability to possess and maintain a DoD Top Secret clearance

This requisition requires the candidate to have a minimum of the following clearance(s):
Secret

This requisition requires the hired candidate to have or obtain, within one year from the date of hire, the following clearance(s):
Secret

Salary compensation range and midpoint:
$129,200 - $161,500 - $193,800 Annual

Work Location Type:
Hybrid

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.