Junior Software Assurance Engineer IRES - SSFB/HSV

Position Title: Junior Software Assurance Engineer

Location: Schriever Space Force Base, Colorado Springs, CO or Redstone Arsenal, Huntsville, AL

Relocation Assistance: None available at this time

Remote/Telework: NO - Not available for this position

Clearance Type: DoD Secret

Shift: Day shift (Mon-Fri)

Travel Required: Up to 10% of the time

#cjpost

Description of Duties:

The Junior Software Assurance Engineer supports the Missile Defense Agency (MDA) on the Integrated Research and Development for Enterprise Solutions (IRES) contract. The candidate will:

·         Learn to perform software security audits identifying risks associated with software and provide a comprehensive security assessment for the MDA IC ISSM. This will include known vulnerabilities published to the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD).

·         Discover and compile a list of dependencies/bill of materials for software being audited.

·         Use of various tools to discover vulnerabilities within a software application.

·         Use various programming/scripting/query languages to correlate industry best practices for secure software development.

·         Identify common security issues including input validation, error and exception handling, logging, access controls, SQL

·         Injection, cross-site scripting (XSS), etc. and articulate how to mitigate or reduce their impact.

·         Help correlate Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) vulnerabilities and other policies with vulnerabilities discovered and documenting them to be consumable by a wide audience.

·         Monitor a queue of requests for software security audits.

·         Assist with developing reporting metrics for team activities.

·         Occasional Interaction with requesters of varied backgrounds to determine use-case scenarios, understand application architecture and to help determine risk mitigation strategies.

The successful candidate will:

·         Be able to independently perform all aspects of software code auditing.

·         Have the ability to translate technical data into a format understood by individuals form varied backgrounds.

·         Be articulate, in both written and verbal communication, able to brief senior Contract and Government leadership.

·         Work in a fast-paced, high-pressure, changing environment.

·         Be able to use the STIG viewer and identify, understand and apply STIGs required for review of the software.

·         Have a strong commitment to a team environment.

·         Possess a willingness to learn new technologies.

·         Have the ability to de-conflict request/requireme