Software Developer SME; Artifact Management & Secure Development Specialist TS​/SCI

Software Engineering Careers Hybrid Remote , Quantico,Virginia

Software Engineer SME (Artifact Management & Secure Development Specialist) – TS/SCI

Xcelerate Solutions is seeking an Artifact Management and Secure Software Development Specialist SME Software Engineer for this effort will be responsible for providing guidance and targeted assistance in migrating NCIS Mission Applications to a secure software development toolchain and ensuring compliance with DON-CIO policies regarding secure software development practices and products.

Location:

Quantico, VA. Hybrid remote schedule. Must be local and able to meet onsite 1-2 times per week or as required.

Clearance:

TS/SCI

Key Responsibilities:

• Design, develop, implement, and maintain secure, scalable, full-stack software applications supporting mission-critical enterprise systems, with a focus on Secure Development Operations (Sec Dev Ops ) principles.
• Develop and maintain software applications using compiled and interpreted programming languages while ensuring compliance with secure coding standards and enterprise security requirements.
• Design, develop, and optimize relational and No
  
  SQL database solutions to support application functionality, performance, data integrity, and security.
• Establish, implement, and enforce secure coding standards, including code quality, Zero Trust security principles, Software Bill of Materials (SBOM), and secure dependency management.
• Configure, administer, and maintain software artifact management repositories using Nexus, JFrog Artifactory, NuGet, or comparable technologies to ensure secure storage, version control, and distribution of software components.
• Implement and maintain Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and code quality tools, including Sonar Qube, Aikido, CodeQL, or equivalent platforms, based on their supported capabilities.
• Integrate automated security scanning, code quality assessments, vulnerability detection, and dependency analysis into CI/CD pipelines to strengthen application security throughout the software development lifecycle.
• Establish and enforce Git-based source control practices, including pre-commit hooks, branch protection policies, pull request reviews, and automated code validation.
• Implement secure software supply chain practices to ensure software dependencies, third-party libraries, and application artifacts meet organizational security and compliance requirements.
• Identify, assess, prioritize, and remediate software vulnerabilities, insecure dependencies, and code quality issues to reduce security risks across enterprise applications.
• Collaborate with Dev Sec Ops  engineers, cybersecurity personnel, infrastructure teams, and Mission Application developers to implement consistent security controls and secure development practices.
• Provide technical guidance and mentorship to Mission Application developers on secure coding methodologies, application security, vulnerability remediation, and compliance requirements.
• Apply software engineering and security principles across diverse programming languages, operating systems, development frameworks, and hosting environments.
• Evaluate and implement emerging technologies, security tools, and development methodologies to address evolving mission requirements and improve software engineering capabilities.
• Support security assessments, accreditation activities, and compliance reviews by maintaining software security documentation, SBOM records, vulnerability reports, and evidence of implemented security controls.
• Develop and maintain secure software development procedures, technical documentation, coding…