Source Software Security SME
Job in
Arlington, Arlington County, Virginia, 22201, USA
Listed on 2026-11-05
Listing for:
ECS
Full Time
position Listed on 2026-11-05
Job specializations:
-
IT/Tech
Cybersecurity, Information Security & Data Protection
Job Description & How to Apply Below
Everforth ECS is seeking a Open-Source Software Security SME to join our team in Arlington, VA (Hybrid).
ECS is seeking an Open-Source Software (OSS) Security Subject Matter Expert to support the Cybersecurity and Infrastructure Security Agency (CISA). This role will strengthen open-source software security through vulnerability analysis, hands-on software development, and collaboration with technical teams and the open-source community. This is a hybrid position.
Key Responsibilities- Support CISA’s Secure by Design initiatives and engagement with open-source organizations, maintainers, and vendors.
- Use AI-assisted tools to identify and analyze OSS vulnerabilities, validate findings, and recommend remediation.
- Assess existing vulnerabilities and identify opportunities for software hardening and modernization.
- Provide technical guidance on dependency management, Software Bills of Materials (SBOMs), and software supply chain risks.
- Translate CISA guidance into working tools and software contributions suitable for acceptance into active open-source projects.
- Contribute code, testing, and documentation to an open-source coding agent used as a reference implementation.
- Collaborate with vulnerability management, threat hunting, AI, product, and platform engineering teams.
- Participate in technical pilots and open-source community engagements.
Salary Range: $185,000 - $235,000
Required Skills- US citizenship with ability to obtain and maintain DHS Suitability (EOD).
- Bachelor’s degree in computer science, Cybersecurity, Software Engineering, or related technical field
- Minimum of 8 years’ professional experience in software development, cybersecurity, or related technical roles
- At least 8 years of hands-on experience in open-source software security, application security, or vulnerability research
- Experience in open-source software security, vulnerability analysis, and software development.
- Demonstrated experience developing, testing, and contributing code to production software systems, and open-source projects.
- Knowledge of secure development practices, dependency management, SBOMs, and software supply chain security.
- Experience using AI-assisted development or security tools and validating their results.
- Strong communication skills and ability to work across technical teams.
- 10+ years of professional experience in software security, with at least 7 years in open-source security
- Experience supporting CISA, DHS, or other federal cybersecurity agencies or programs
- Previous work with critical infrastructure protection or national cybersecurity initiatives
- Experience in technical leadership or architect role guiding security strategy
- Familiarity with Secure by Design initiatives.
- Experience with an Open-Source Program Office (OSPO) or open-source coding agents.
To View & Apply for jobs on this site that accept applications from your location or country, tap the button below to make a Search.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
Search for further Jobs Here:
×