Role OverviewThe ideal candidate will lead the implementation of security solutions across all layers of our infrastructure, primarily in the application layer, and in the interactions between systems. They will relish the opportunity to tackle hard problems and find solutions within the environmental constraints that exist. They will also be able to serve as a technical lead, working independently and in coordination with other team members to communicate complex technical concepts and guide cross-functional teams through the development lifecycle.
What You Will Do
Engineer and deploy comprehensive security measures throughout the software lifecycle, from development to production, ensuring adherence to secure coding standards and safeguarding data. Analyze code scan outputs from tools like Anchore, WebInspect, and DBProtect, and collaborate with compliance teams to fine-tune and enhance scanning effectiveness.
Why It Might Be a Fit
The ideal candidate will have a passion for government technology solutions, a solid grasp of Zero Trust security concepts, and practical approaches to implementation. They will also be able to promote secure development practices in Java, Python, and Angular by offering internal training and hands-on support for secure coding, deployment, and operations.
Requirements
- U.S. Citizenship is required.
- Candidate must be able to obtain CBP Public Trust clearance.
- Bachelor’s degree and over 10 years of hands-on experience in software development using Java, Python, and Angular.
- Recent experience building applications in Java with Spring Boot framework.
- Proven expertise in implementing security protocols such as TLS/SSL, IPsec, OAuth, OpenID Connect, SAML, HTTPS, and encryption/key management.
- Solid grasp of Zero Trust security concepts and practical approaches to implementation.
- Extensive experience working with AWS services and security tools, including IAM, VPC, CloudTrail, and AWS Security features.
- Strong background in microservices and container technologies, including Docker and Kubernetes.
- Track record of integrating security checks and controls into CI/CD pipelines.
- Knowledgeable in network security, database systems, and hardware-level protections.
- Exceptional analytical and troubleshooting abilities, with a keen eye for detail.
- Effective communicator able to explain complex security topics to both technical and non-technical audiences.
- Experienced in leading projects and mentoring team members to support growth and collaboration.
- Collaborative mindset with the ability to work closely with developers, ISSOs, security engineers, architects, and other stakeholders involved in solution delivery.
Benefits
- Medical, dental, and vision insurance
- Retirement savings plans
- Paid time off
- Other supplemental programs
]]>