Active DoD Top Secret/SCI security clearance required
IAT Level 2 certification (e.g., Security+) or IAM Level 2 (e.g., CISSP) required
Bachelor's degree in a Technical Discipline from an accredited institution
Proficient in coding with supported programming languages (e.g., Java, C++)
Experience with vulnerability scans and security system assessments
Ability to design and implement security controls for information systems
Familiarity with code analysis tools and secure software development practices
Responsibilities
Establish and maintain a development environment for SWAP tool
Design and maintain databases for SWAP
Develop and maintain web applications for SWAP
Administer web/portal development environments and manage software installations
Deliver and sustain features for SWAP identified during planning events
Deploy automated application security testing tools and educate users on security features
Support integration of software assurance tools into automated testing methodologies
Benefits
Company funded Employee Stock Ownership Plan (ESOP) & matched 401(k)
Comprehensive medical, dental, and vision insurance
Free life and disability insurance with options for supplemental coverage
Health Savings Account (HSA) and Flexible Spending Plan
Employee Assistance Program (EAP)
Paid vacation, holiday, and sick leave
Flexible schedules and a casual work environment
Continuing education and professional development programs
Free access to an online training library including certification prep
Bonus program and employee referral incentives
Full Job Description
Position Summary:
The candidate will provide Software Development support to National Geospatial-Intelligence Agency (NGA). The Software Developer role will develop, create, maintain, and write/code new (or modify existing) computer applications, software, or specialized utility programs.
Contract Specifications:
Must have an active DoD Top Secret/SCI security clearance
Must be have an IAT Lvl 2 compliant certification such as Security+ for Intermediate. role or IAM Lvl 2 like Certified Information Systems Security Professional (CISSP) for Sr. role.
Essential Functions and Responsibilities:
The Contractor shall establish and maintain a development environment in support of SWAP tool development and maintenance.
The Contractor shall provide database design for development & maintenance of SWAP.
The Contractor shall provide web application design, development and maintenance for SWAP.
The Contractor shall develop and provide web/portal development environment administration in support of SWAP, request approval for software download, installation, and configuration on the development team workstations.
The Contractor shall deliver and sustain SWAP tool features that are identified during program increment-planning events.
The Contractor shall deploy the appropriate automated application security testing tools. It is the Contractor's responsibility to make users aware of how to make the most of application security features.
The Contractor shall support efforts to integrate software assurance tool into the automated testing/automated pipeline methodologies.
The Contractor shall evaluate commercial products for use and integration into the agencies Software Assurance.
The Contractor shall assist in the development of policies and guidance regarding Software Assurance.
The Contractor shall support automated evaluation tools as they pertain to Software Assurance.
Analyze information to determine, recommend, and plan the development of a new application or modification of an existing application.
Analyze user needs and software requirements to determine feasibility of design within time and cost constraints.
Apply coding and testing standards, apply security testing tools including "'fuzzing" static-analysis code scanning tools, and conduct code reviews.
Apply secure code documentation.
Capture security controls used during the requirements phase to integrate security within the process, to identify key security objectives, and to maximize software security while minimizing disruption to plans and schedules.
Consult with engineering staff to evaluate interface between hardware and software.
Correct errors by making appropriate changes and rechecking the program to ensure that desired results are produced.
Identify security implications and apply methodologies within centralized and decentralized environments across the enterprise's computer systems in software development.
Identify security issues around steady state operation and management of software and incorporate security measures that must be taken when a product reaches its end of life.
Perform secure programming and identify potential flaws in codes to mitigate vulnerabilities.
Required Education, Skills, and Experience:
Bachelor's degree in Technical Discipline from an Accredited College or University
Skill in conducting vulnerability scans and recognizing vulnerabilities in security systems.
Skill in creating and utilizing mathematical or statistical models.
Skill in creating programs that validate and process multiple inputs including command line arguments, environmental variables, and input streams.
Skill in designing countermeasures to identified security risks. S0031: Skill in developing and applying security system access controls.
Skill in discerning the protection needs (i.e., security controls) of information systems and networks.
Skill in writing code in a currently supported programming language (e.g., Java, C++).
Skill in using code analysis tools.
Skill to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
Ability to tailor code analysis for application-specific concerns.
Ability to develop secure software according to secure software deployment methodologies, tools, and practices.
Physical Demands and Expectations:
Regular physical activity to include walking, climbing stairs, bending, stooping, reaching, lifting (up to 15 pounds), and standing; occasional prolonged sitting
Ability to speak, read, hear and write, with or without assistance
Ability to use phone and computer systems, copier, fax and other office equipment
This position description represents a summary of the major components and requirements of the outlined position. Other responsibilities may be assigned or required as business needs dictate. Questions regarding this description should be addressed to the hiring authority or to Human Resources.
Benefit Offerings
Company funded Employee Stock Ownership Plan (ESOP) & company matched 401(k)
Comprehensive medical, dental, and vision insurance
Free life and disability insurance with supplemental coverage options
Flexible schedules, casual work environment, and relaxed dress code
Continuing education and professional development programs at all levels
Free access to online training library including certification preparation
Bonus program, employee referral program, monetary recognition opportunities, and more...
Benefits may vary based on employment status, business unit, and location.
About Life Cycle Engineering, Inc
Life Cycle Engineering, Inc. (LCE) is a privately held engineering, consulting, and technical services firm headquartered in Charleston, South Carolina. Founded in 1976, LCE provides engineering, programmatic, and technical support services to the United States Navy, United States Marine Corps, United States Coast Guard, United States Army, United States Air Force, and other federal agencies, as well as commercial clients. LCE specializes in reliability engineering, maintenance engineering, information technology, program management, and business process engineering. The company has additional offices in Washington, D.C., San Diego, California, Norfolk, Virginia, and Mayport, Florida.
