Qualifications
Responsibilities:Conduct thorough application security assessments utilizing both automated and manual methodologies, such as:Static Code Analysis (SAST)Software Composition Analysis (SCA)Fuzz TestingManual Code and Design ReviewsIdentify, analyze, and assist in remediating application-level vulnerabilities. Guide software engineers in embedding security measures into system and application designs. Integrate and sustain application security tools within CI/CD and DevSecOps pipelines. Develop, implement, and enhance continuous integration security analysis tools. Optimize security tools to minimize false positives and enhance signal quality. Support development teams in comprehending security findings and applying effective remedies. Engage in threat modeling and secure design reviews. Remain informed about emerging vulnerabilities, attack vectors, and mitigation strategies. Document findings, recommendations, and industry best practices. Perform additional duties as required. Requirements:Bachelor’s degree and a minimum of 2 years of professional experience in cybersecurity or software development.
About the job
Join SciTec, a proud subsidiary of Firefly Aerospace, as we lead innovations in advanced technologies that bolster U. S. National Security and Defense. With over 45 years of dedicated service to Department of Defense clients, we excel in crafting cutting-edge remote sensing algorithms and tools that provide exceptional data exploitation capabilities for missile defense, intelligence, surveillance, reconnaissance, space domain awareness, and aircraft survivability missions.
Important Notice: To maintain compliance with U. S. government contracts, all employees must be U. S. citizens. Applications from non-citizens will not be considered.
We are urgently seeking a skilled Application Security Engineer to enhance the security of our Next-Generation Missile Warning software. This role is an exciting opportunity to contribute to vital national defense initiatives through the end-to-end processing of Overhead Persistent InfraRed (OPIR) sensor data, focusing on Missile Warning, Missile Defense, Battlespace Awareness, and Technical Intelligence.
The ideal candidate will possess robust technical security expertise and demonstrate proficiency in collaborating with software engineers within a DevSecOps environment, ensuring security is seamlessly integrated into the development lifecycle.
About SciTec
SciTec is a forward-thinking defense contractor dedicated to delivering advanced technologies in support of U. S. National Security and Defense. Our expertise spans over four decades, where we have been instrumental in providing innovative solutions that enhance missile defense and intelligence operations.