Join COLSA as a Software Assurance Engineer and help safeguard mission-critical systems. In this role, you’ll analyze complex software applications to uncover cybersecurity vulnerabilities using advanced automated tools and hands-on techniques. You’ll assess both source code and binaries, prepare detailed risk reports, and recommend effective mitigations. Your expertise will directly contribute to ensuring software integrity, protecting sensitive information, and supporting national defense.
Principal Duties and Responsibilities (*Essential functions)
- Analyzes complicated software programs to identify cybersecurity weaknesses and vulnerabilities using automated tools and manual processes. *
- Prepares software risk reports based upon identified cybersecurity weaknesses and vulnerabilities. *
- Prepares and presents briefings on software risks and provides recommendations on corrections and mitigations. *
- Reviews documentation from software developers to ensure compliance with code development and software security best practices. *
- Provides weekly status reports and updates to supervisor. *
- May conduct research on new software assurance tools and technologies.
_At COLSA, people are our most valuable resource and centered at our core value. We invite you to unite your talents with opportunity and be a part of our “Family of Professionals!” Learn about our employee-centric culture and benefitshere. _
Required Skills
Required Experience
- Bachelor’s degree or higher in Computer Science, Software Engineering, Cybersecurity, or related field, or equivalent experience
- Minimum of 2-8 years related experience
- Ability to analyze both source code and compiled binaries for security weaknesses
- Knowledge of secure coding standards and software development best practices
- Active Secret Clearance; US Citizenship required
Preferred Qualifications
- Experience conducting software security assessments using automated Static Application Security Testing (SAST) tools.
- Experience conducting software security assessments using automated Dynamic Application Security Testing (DAST) tools.
- Experience categorizing software weaknesses using the Common Weakness Enumeration (CWE) catalog.
- Experience calculating software cybersecurity risk using the Common Vulnerability Scoring System (CVSS) or similar software risk scoring methodologies.
- Experience analyzing software for Aviation and Missile Systems.
Applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. COLSA Corporation is an Equal Opportunity Employer, Minorities/Females/Veterans/Disabled. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.