Software Security Engineer III

To acquire the advantage, Zolon is seeking a Senior-Level Software Security Engineer who must be an action-oriented self-starter, capable
of solving complex technical problems both independently and in a team environment, while leading a systematic engineering approach to ensure cybersecurity is built into software during the design and development process and before ATO. Translate and define security requirements, use, and mature practices for building secure applications, and suggest implementation strategies to Software Product Owners that lead to software packages that are impervious to cyberattack.

Utilize XACTA 360 in support of Needs and Collection Security Accreditation processes. Utilize threat modeling, employ cybersecurity software, and conduct risk assessments to detect and analyze cybersecurity threats. Work with DEVOPS/SEC/Ops engineers to ensure security vulnerabilities are assessed, mitigated, and fixed during development, and share knowledge of threats with the IPO team.

Duties may include:
Lead and facilitate Needs and Collection Management software cybersecurity design
and development
Analyze software development for cybersecurity threats and vulnerabilities.
Analyze current Needs and Collection Management systems/services and provide
recommendations and alternatives to strengthen cybersecurity protocols
Analyze Needs and Collection Management cybersecurity metrics and provide
recommendations to eliminate vulnerabilities
Provide Program managers with status updates about the Cyber posture of their systems
Attend all Cybersecurity-related meetings and provide feedback to all PMs on the latest
information that's either informative in nature or affects their systems directly
Manage Cybersecurity Confluence page for all Needs and Collection Management
programs by removing irrelevant information and maintaining the latest metrics
Identify and recommend Needs and Collection Management for improved cybersecurity
tools, processes, and models to reduce vulnerabilities
Facilitate program epic planning, ensuring inclusion of cybersecurity objectives.
Assist Needs and Collection with entering and maintaining XACTA 360 in support of ATO
and ATO-in-a-Day activities

Skills and Experience:

Demonstrated experience preparing presentations to brief senior leaders
Coordination of multiple teams with various skills to maintain a cybersecurity posture

Required:
Bachelor's degree or higher in Computer Science or Engineering, Information
Technology, Management Information Systems, or related STEM degree
Has an IAM Level 3 certification
Senior-level experience in Dev Sec Ops  processes, practices, tools, and methods
Demonstrated experience with Dev Sec Ops  culture and practices
Familiar with AGILE processes, practices, tools, and methods
Demonstrated experience with Xacta
Demonstrated Experience managing ATO requirements for multiple systems

Desired:
Demonstrated experience with JIRA, Confluence
Demonstrated experience with ACAS, Git Lab, and Red Hat Advanced Cluster Security
(RHACS)
Demonstrated experience with Kubernetes, Docker, and Amazon Web Services
Demonstrated

Experience with various Artificial Intelligence (AI) models (e.g., Gemini,
Chat, Claude, etc.)

Certification requirement: IAM Level 3
Clearance: Top Secret/SCI
Location: Chantilly, VA