Software Security Engineer

Must be a US Citizen who currently possesses a Top Secret with SCI eligibility. Must be local to the DC Metro area as this is a hybrid position within CONUS. Presence at gov facilities (Quantico, VA and other areas within DMV) may be required 2-4x a week. Some travel will be required.

Statement of Work / Task Description:

• Provides security support throughout development and modernization lifecycle
• Aligns security architecture with NBIS security requirements and modernization goals
• Collaborates with customer SMEs and IBM teams to ensure secure design and implementation
• Supports the ATO process for PVAAMS by preparing documentation and addressing security controls
• Monitors and validates security posture across containerized and cloud environment
• Contributes to DevSecOps practices and continuous security integration

Required skills/Level of Experience:

• 10+ years in cybersecurity engineering or security engineer roles
• CISSP
• Experience supporting ATO processes and implementing security controls
• Strong understanding of federal security frameworks and NBIS requirements
• Skilled in container security and cloud-native security practices
• Familiarity with vulnerability scanning, monitoring, and remediation tools
• Ability to collaborate across technical and compliance teams
• Familiarity with Zero Trust principles and continuous monitoring
• Proficient in documenting security architecture and control implementation
• Bachelor's in Cybersecurity, IT, or related field is required
• CISSP Certification
• CompTIA Sec+ certification

Nice to have skills:

• 5+ years supporting security in cloud migration or modernization projects
• Experience with DevSecOps pipelines and automated security tooling