Principal Software Cyber Engineer

Description

The Space Systems team is building and fielding a new ground-based radar for Space Domain Awareness (SDA) missions, and this Principal role sits on that program.

You will be the senior lead for software and cyber security, working with the senior technical staff on the program.

Responsibilities

• Define, build and maintain the software and cyber security architecture for mission systems used in live operations, software development and long-term support of the radar.
• Apply systems engineering methods to design, build and document strong cyber protections for mission software and the services that support it across the program.
• Design, develop, document, test and debug applications and systems built on logical and mathematical solutions.
• Carry out research across disciplines and work with equipment and hardware engineers on planning, designing, developing and using electronic data processing systems for product and commercial software.
• Work out what computer users need and study system capabilities to solve problems related to program intent, output requirements, input data collection, programming methods and controls.
• Write operating instructions and design and build compilers, assemblers, utility programs and operating systems.
• Make sure software meets the applicable standards.

Requirements

• Skilled in Java, Python, JavaScript, C and C++.
• Experience with the Spring Framework.
• Experience finding and fixing defects in existing software.
• Familiar with Agile methods and working in cross-functional scrum teams.
• Able to review static and dynamic scan results, separate real security findings from false positives and non-applicable items, and write technical justifications and remediation plans (POA&M).
• Hands-on experience with secure coding and code review to spot common vulnerabilities.
• Know CI/CD pipelines and how security gates fit into build and release processes.
• Able to read security requirements and turn them into developer tasks and acceptance criteria.
• Experience with version control systems and branching strategies on team projects.
• Experience with several Linux distributions, mainly Red Hat Enterprise Linux and Ubuntu.
• Must hold an active U.S. Government Top Secret security clearance at the time you apply, current and within scope.
• Preferred: experience overseeing software integrity and supply chain security, such as dependency management, SBOMs and vendor assessment.
• Preferred: familiar with NIST SP 800-53 Risk Management Framework (RMF) and the DISA Application Security and Development STIG for assessing information system design.
• Preferred: hands-on work with one or more SAST tools, such as SonarQube or Fortify.
• Preferred: hands-on work with one or more SCA tools, such as Sonatype Nexus.
• Preferred: Security+, CISSP or CSSLP certification.
• Preferred: familiar with container security and orchestration hardening (Docker, Kubernetes) and image scanning tools.
• Preferred: practical knowledge of vulnerability lifecycle management and patching across environments.
• Preferred: understanding of data protection requirements and handling of sensitive data, including PII, classified and export-controlled data.
• Preferred: experience supporting or obtaining low-to-high (CDS) transfer approvals and familiarity with compliance workflows.

Conditions

Relocation assistance may be available.

Top Secret clearance is required to start.

Travel is 10% of the time.

Posting tag: SPEnhancedERAP.

The primary level base salary range is $103,600.00 to $155,400.00. This is a general guide; the company weighs scope and responsibilities, your experience, education and skills, and current market conditions when setting offers.

The application window is estimated at 20 days from the posting date and may be shortened or extended based on business needs and candidate availability.

Benefits

• Depending on the position, you may be eligible for overtime, shift differential and a discretionary bonus on top of base pay.
• Annual bonuses reward individual contributions and let you share in company results.
• Vice President and Director roles may be eligible for Long Term Incentives.
• Health insurance, life and disability insurance, a savings plan, paid company holidays, and paid time off for vacation and personal business.