Software Assurance Evaluation Engineer

Responsibilities

• Utilizing, fine-tuning, and evaluating the suitability of automated Software Assurance (SwA) tools for specific customer environments to maximize detection and minimize false positives.
• Interpreting SwA tool results to detect vulnerabilities, triage findings, and drive secure coding practices across the development lifecycle.
• Developing and executing test methodologies, custom scoring criteria, and specific test cases to support and optimize SwA tool analysis.
• Performing software security assessments and interfacing with clients and developers to recommend effective remediation strategies for identified code vulnerabilities.
• Creating technical documentation, comprehensive vulnerability test reports, and risk assessments for leadership.
• Researching and assessing emerging SwA tools and methodologies to continually enhance the team's software security analysis capabilities.

Requirements

• 12+ years of professional experience (or 10+ years with a Bachelor’s degree, or 8+ years with a Master’s degree) in Systems Security Engineering, Software Programming, or Computer Science.
• Strong software analysis or development experience in C/C++ or C#, with the ability to read/analyze Java.
• Experience with technology tools including Klocwork, CodeSonar, Fortify, CodePeer, IDA Pro, or Fortran-Lint.
• Experience with low-level architectures (x86_64, PowerPC, MIPS), assembly language (ASM), or legacy languages like Ada.
• Experience with Rust and/or the ability to learn.

Qualifications

Must have an active TS/SCI with Polygraph.

Physical Requirements

• Must be able to remain in a stationary position 50% of the time.
• Frequent communication with co-workers, management, and customers, which may involve delivering presentations.
• Must be able to exchange accurate information in these situations.