Senior Software Engineer IRES - SSFB/HSV

Position Title: Senior Software Engineer

Location: Schriever Space Force Base, Colorado Springs, CO or Redstone Arsenal, Huntsville, AL

Relocation Assistance: None available at this time

Remote/Telework: NO - Not available for this position

Clearance Type: DoD Secret 

Shift: Day shift (Mon-Fri)

Travel Required: Up to 10% of the time

#cjpost

Description of Duties:

The Senior Software Engineer supports the Missile Defense Agency (MDA) on the Integrated Research and Development for Enterprise Solutions (IRES) contract. The candidate will:

·       Provide Management, Mentorship, and Leadership of other members of the Software Engineering Team.

·       Prioritize and assign work to members of the team.

·       Coordinate and communicate with customers managing expectations and ensuring a high level of customer satisfaction is achieved and maintained.

·       Perform software security audits identifying risks associated with software and provide a comprehensive security assessment for the MDA IC ISSM. This will include known vulnerabilities published to the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD).

·       Discover and compile a list of dependencies/bill of materials for software being audited.

·       Use of various tools to discover vulnerabilities within a software application.

·       Use various programming/scripting/query languages to correlate industry best practices for secure software development.

·       Identify common security issues including input validation, error and exception handling, logging, access controls, SQL

·       Injection, cross-site scripting (XSS), etc. and articulate how to mitigate or reduce their impact.

·       Help correlate Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) vulnerabilities and other policies with vulnerabilities discovered and documenting them to be consumable by a wide audience.

·       Manage a queue of requests for software security audits.

·       Develop reporting metrics for team activities.

·       Interact with requesters of varied backgrounds to determine use-case scenarios, understand application architecture and to help determine risk mitigation strategies.

The successful candidate will:

·       Be able to independently perform all aspects of software code auditing.

·       Have the ability to translate technical data into a format understood by individuals form varied backgrounds.

·       Be articulate, in both written and verbal communication, able to brief senior Contract and Government leadership.

·       Work in a fast-paced, high-pressure, changing environment.

·       Be able to use the STIG viewer and identify, understand and apply STIGs required for review of th