Cybersecurity Engineer – Application/Software Security (TS/SCI)
Data Systems Analysts, Inc.3 days ago
Charlottesville, VA, USASenior
Base Salary
$140k - $170k/yr
Responsibilities
- Own software security within the cyber engineering team and provide technical guidance for applications, APIs, and back-end services.
- Perform application security testing and validate that remediation fixes resolve identified findings.
- Review source code for secure coding issues, insecure design, and exploitable weaknesses.
- Implement, tune, and maintain SAST, DAST, dependency scanning, and container scanning tools.
- Integrate software security checks into development and release processes.
- Evaluate open-source and commercial cyber tools and source code for mission fit, security risk, and adaptability.
- Partner with engineers, system administrators, architects, ISSOs, and ISSMs to define security requirements and validate controls.
- Assess risks from major software changes, unpatched components, and software reaching end of support.
- Apply MITRE ATT&CK techniques and threat modeling to prioritize findings by real-world impact.
- Document test results, release risk, and technical evidence supporting RMF and ATO activities.
- Communicate software risks, findings, and practical remediation guidance to technical teams, system owners, and leadership.
Requirements
- BS degree in Computer Science, Software Engineering, Computer Information Systems, Cybersecurity, or a related field; equivalent experience may substitute for the degree.
- TS/SCI security clearance.
- CompTIA Security+ certification compliant with DoD 8140.
- At least 5 years of combined experience in software development, application security, penetration testing, or secure software assessment.
- Hands-on development experience in at least one of Python, Java, C#, Go, or JavaScript, with understanding of back-end services, APIs, and databases.
- Experience identifying and validating software vulnerabilities through code review, security testing, or technical assessment.
- Knowledge of OWASP Top 10 and CWE weaknesses, their exploitation, and remediation.
- Ability to assess exploitability and impact and communicate practical fixes to engineering and compliance personnel.
- Ability to work independently as the primary software security resource on a cybersecurity team.
- Preferred qualifications include GWAPT, OSCP, OSWE, CSSLP, PenTest+, CySA+, SecurityX/CASP+, CEH, CISSP, or another relevant certification.
- Preferred experience includes Fortify, SonarQube, Checkmarx, Burp Suite, OWASP ZAP, GitLab, Jenkins, SQL, Oracle, PostgreSQL, ETL workflows, containers, AWS/GovCloud, software supply chain security, SBOMs, RMF, NIST SP 800-53, eMASS, the DISA Application Security and Development STIG, and DoD, U.S. Army, or Intelligence Community missions.
- Hired employees are expected to have experience with Microsoft Copilot or an approved equivalent AI solution.
Benefits
- Onsite work at the National Ground Intelligence Center in Charlottesville, Virginia; candidates willing to relocate are encouraged to apply.
- The role supports DoD mission-critical systems and requires TS/SCI clearance.
- The posted base salary range is $140,000-$170,000 USD.
Tech Stack
Categories
About Data Systems Analysts, Inc.
Data Systems Analysts, Inc. (DSA) delivers IT and operational-technology services—including systems engineering, software development, cybersecurity, data analytics, and cloud solutions—to U.S. defense, federal, and critical-infrastructure customers. The company is 100% employee-owned, founded in 1963, and headquartered in Trevose, Pennsylvania. DSA’s work spans DevSecOps, enterprise collaboration, and industrial data platforms such as the OSIsoft PI System.