Client is looking for experienced Software Engineers to establish and maintain software build pipelines in a DevSecOps environment utilizing Azure Cloud, GitLab, and various build tools and scripts. Your duties include supporting the integration of SAST, DAST, and SCA tools for independent verification, validation, and software assurance assessments. 

Responsibilities include evaluating scan results for severity, validating developer mitigations, and ensuring software cybersecurity specifications are met. You will also participate in meetings with developers to discuss software assurance and its progress.

Location: Huntsville, AL

This position requires 100% onsite presence.

Key Responsibilities:

• Conduct Software Assurance evaluations to ensure sustainable, maintainable, testable, and survivable software development.
• Mentor junior Software IV&V Analysts.
• Develop and maintain DevSecOps pipelines in secure environments.
• Perform independent software verification and validation.
• Develop and document complex software architectures and designs.
• Develop verification plans, test procedures, and unit tests.
• Select and deploy SAST, SCA, and DAST tools.
• Provide expertise in software domain areas and adherence to standards.

Key Requirements:

Direct 3-8 years of experience with the two or more of the following tools and languages or equivalent Static and Dynamic Software Assessment tools:

• Building complex multilayered software projects using an automated build framework (e.g. Open Source Maven, GNU Cmake, GitLab Inc. GitLab).
• One or more Static Assessment Scan Tools (SAST) (e.g. OpenText Fortify, Synopsis Coverity, Perforce Klocwork, AdaCore Gnat Studio, SciTools Understand).
• One or more Dynamic Assessment Scan Tools (DAST) (e.g. Open Source Valgrind, USG Open Source VADER, ForAllSecure Mayhem).
• One or more Software Composition Assessment (SCA) Tools (e.g. Synopsis BlackDuck, Palo Alto Prisma, Tenable/Nessus/ACAS, JFrog Artifactory Xray).
• One or more coding languages in preference order; C/C++, Python, ADA, Java, Golang.

Additional technical requirements:

• Must already have DoD 8570 IAT/IAM Level II Certificate such as CompTIA Sec+.
• DoD Security Clearance.
• Past GMD experience is a bonus but not required.
• Embedded development is preferred over full-stack developer experience.

What we offer:

• Robust startup environment with a variety of projects to work on
• Growth paths and endless opportunities to learn and develop
• Relocation assistance
• Paid holidays and unlimited PTO
• 4% employer contributions toward 401k
• Performance-based bonus and profit-sharing
• 50% coverage of health insurance for employees and their dependents