Software Security Engineer, Junior

Software Security Engineer, Junior

The Opportunity: 
As a cyber professional, you know that understanding adversary tactics, techniques, and procedures is vital to producing the intel that enables the success of organizations. At Booz Allen, you can apply your skills to inform strategies and help mitigate the most pressing vulnerabilities. Here, you aren’t just deciphering reports. You’re telling the story to play a part in informing our client's most far-reaching cyber security decisions.

As a Software Security Engineer on our team, you’ll be trusted to help customers solve problems using a variety of techniques. Using methods like static analysis, dynamic testing, and manual code review, you’ll identify vulnerabilities and provide actionable results to improve the security posture of mission critical space systems. You’ll learn how to incorporate technical results into broader presentations, white papers, and risk assessment reports to enable U.S. Space Force programs to make the best decisions to secure their mission. You’ll help monitor security environments and identify security gaps through the eyes of an adversary. 

In this role, you’ll impact the exciting and rapidly evolving domain of space systems cybersecurity while developing greater breadth and depth of cybersecurity knowledge.

Booz Allen is committed to creating an environment where you can grow your cyber career through mentoring, the opportunity to leverage new resources, and the ability to gain in-demand certifications to expand your skill set. With opportunities supporting both the private and public sectors across multiple geographies, your career is only limited by your own appetite for exploration.

Work with us to secure our systems, networks, and critical infrastructures.

Join us. The world can’t wait.

You Have:  

• 2+ years of experience with secure software testing, review, or assessment to identify potential flaws in source code and mitigate vulnerabilities
• 2+ years of experience with using code analysis tools and interpreting the results
• Knowledge of cybersecurity principles and methods that apply to software development such as modularization, layering, abstraction, data hiding, and simplicity and minimization
• Knowledge of system and application security threats and vulnerabilities such as buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language (PL/SQL) and injections, race conditions, covert channel, replay, return-oriented attacks, and malicious code
• Knowledge of computer programming principles such as object-oriented design, programming language structure and logic, interpreted languages such as JavaScript, and compiled languages such as C/C++ and Java
• Knowledge of secure coding techniques.
• Ability to apply coding and testing standards, apply security testing tools such as static analysis tools, and conduct code reviews and develop secure software testing and validation procedures
• Ability to obtain a security clearance
• Bachelor’s degree
• Ability to obtain Security+ CE or CISSP certification within 6 months of hire

Nice If You Have:  

• Experience in designing countermeasures to identified security risks and determining the security controls of information systems, networks, or software components
• Experience with secure test plan design such as unit, integration, system, and acceptance
• Knowledge of secure software deployment methodologies, tools, and practices
• Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity such as Risk Management Framework (RMF), and DoD Application Security and Development (ASD) Security Technical Implementation Guide (STIG)
• Knowledge of embedded systems or operational technology (OT) and supply chain risk management standards, processes, and practices.
• Knowledge of risk management processes such as methods for assessing and mitigating risk, policies, requirements, and procedures.
• Knowledge of software development models such as Waterfall Model, Spiral Model, and DevSecOps
• Top Secret clearance
• Security+ CE or CISSP certification
• CSSLP certification

Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.
 
Create Your Career:

Grow With Us
Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networkin