Jobs and Careers
AG
Software Security Engineer (SME)
Agile DefenseAlexandria, United Statesfull_timeVerifiedPosted 15 Oct 2024
About the role
At Agile Defense we know that action defines the outcome and new challenges require new solutions. That’s why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next.
Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility—leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation’s vital interests.
Requisition #614Job Title: Software Security EngineerLocation: REMOTEClearance Level: Active DoD - Public TrustRequired Certification(s): · Certifications: CISSP (or equivalent), GCSA or possess a willingness to pursue certifications after hire
SUMMARYThe United States Patent and Trademark Office (USPTO), Cybersecurity Division, has a requirement to establish a white-box testing capability within USPTO by adding contractor expertise to engage with existing system and product owners with the goal of supplementing companion effort penetration testing services. This effort will enhance data security protections by evaluating USPTO systems, with a specific focus on sensitive Business Impact Information (BII) systems that contain Intellectual Property (IP) and PII.A successful candidate will have verifiable experience in white-box testing, secure coding, static code analysis, dynamic application security testing, architecture security, Application Programmatic Interface (API) validation and communication skills. Strong technical capabilities, and an understanding of in-scope systems to the organization with respect to operational impact, is important as a key function of the role is to work closely with defensive partners.
JOB DUTIES AND RESPONSIBILITIES· Perform code reviews to identify flaws in the development of custom applications that handle sensitive IP data, particularly those involving complex data transformations, encryption, or proprietary algorithms.· Drive configuration auditing through review of system and network configurations for misconfigurations or insecure settings that could lead to exploitation.· Execute access controls to validate and assess whether internal access controls effectively enforce the principle of least privilege and prevent unauthorized access to IP data.· Generate reports that highlight security weaknesses uncovered during white-box testing and provide actionable remediation steps.· Ensure that critical issues are resolved before new software releases or system updates go live, especially if they affect data-sharing processes or BII systems.· Research, test, build, and coordinate the conversion and/or continuous integration pipelines and toolchains based on client requirements.· Design and develop new software products or major enhancements to existing software to support security operations.· Address problems of systems integration, compatibility, automation and orchestrations.· Assesses cloud security architectures and provide recommendations to improve overall infrastructure security and methods to automate security testing of applications moving through the CI/CD pipeline.· Consult with project teams and end users to identify application requirements.· Perform feasibility analysis on potential future projects to management.· Assist in the evaluation and recommendation of application software packages, application integration and testing tools.· Resolve problems with software and responds to suggestions for improvements and enhancements.
Education, Background, and Years of Experience· 10+ years of relevant experience with most of the requirements below· Bachelor’s degree/University degree or equivalent experience
ADDITIONAL SKILLS & QUALIFICATIONSRequired Skills· Security Architecture reviews· DevSecOps CI/CI pipelines standards and best practices· Application Programming Interface (API) development and testing·
Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility—leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation’s vital interests.
Requisition #614Job Title: Software Security EngineerLocation: REMOTEClearance Level: Active DoD - Public TrustRequired Certification(s): · Certifications: CISSP (or equivalent), GCSA or possess a willingness to pursue certifications after hire
SUMMARYThe United States Patent and Trademark Office (USPTO), Cybersecurity Division, has a requirement to establish a white-box testing capability within USPTO by adding contractor expertise to engage with existing system and product owners with the goal of supplementing companion effort penetration testing services. This effort will enhance data security protections by evaluating USPTO systems, with a specific focus on sensitive Business Impact Information (BII) systems that contain Intellectual Property (IP) and PII.A successful candidate will have verifiable experience in white-box testing, secure coding, static code analysis, dynamic application security testing, architecture security, Application Programmatic Interface (API) validation and communication skills. Strong technical capabilities, and an understanding of in-scope systems to the organization with respect to operational impact, is important as a key function of the role is to work closely with defensive partners.
JOB DUTIES AND RESPONSIBILITIES· Perform code reviews to identify flaws in the development of custom applications that handle sensitive IP data, particularly those involving complex data transformations, encryption, or proprietary algorithms.· Drive configuration auditing through review of system and network configurations for misconfigurations or insecure settings that could lead to exploitation.· Execute access controls to validate and assess whether internal access controls effectively enforce the principle of least privilege and prevent unauthorized access to IP data.· Generate reports that highlight security weaknesses uncovered during white-box testing and provide actionable remediation steps.· Ensure that critical issues are resolved before new software releases or system updates go live, especially if they affect data-sharing processes or BII systems.· Research, test, build, and coordinate the conversion and/or continuous integration pipelines and toolchains based on client requirements.· Design and develop new software products or major enhancements to existing software to support security operations.· Address problems of systems integration, compatibility, automation and orchestrations.· Assesses cloud security architectures and provide recommendations to improve overall infrastructure security and methods to automate security testing of applications moving through the CI/CD pipeline.· Consult with project teams and end users to identify application requirements.· Perform feasibility analysis on potential future projects to management.· Assist in the evaluation and recommendation of application software packages, application integration and testing tools.· Resolve problems with software and responds to suggestions for improvements and enhancements.
Education, Background, and Years of Experience· 10+ years of relevant experience with most of the requirements below· Bachelor’s degree/University degree or equivalent experience
ADDITIONAL SKILLS & QUALIFICATIONSRequired Skills· Security Architecture reviews· DevSecOps CI/CI pipelines standards and best practices· Application Programming Interface (API) development and testing·
Apply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.
Apply Now →Generate Application KitFree account required — sign up in 30s