Software Security Developer SME

Software Security Developer SME Job #1020

Clearance: Public Trust or ability to obtain

Dev Technology Group is looking for a Software Security Developer Subject Matter Expert to support both Operations & Maintenance (O&M) and new development efforts for a federal government client. The ideal candidate will have relevant Cybersecurity experience, strong collaboration and communication skills, and the ability to manage complex work activities in a deadline-driven environment. This is a great opportunity to work on mission‑critical systems that provide clear value to end users and our federal government clients.

The Software Security Developer SME will be responsible for developing software applications, services, and systems (e.g., user-facing and back-end services). Key responsibilities of the Software Security Developer, SME include:

• Managing source code using industry version-control best practices.
• Researching new techniques and technologies to stay current in software development methodologies and tools.
• Collaborating with stakeholders to define needs and/or specifications and develop proposed solutions.
• Testing and integrating developed software applications into the operational baseline.
• Modifying or enhancing existing software to correct errors, to adapt it to new hardware, or to upgrade interfaces and improve performance.
• Creating technical models, architectural artifacts, and/or prototypes that include physical, interface, logical, or data models (e.g., model view controller (MVC) programming practices).
• Sharing actionable/valuable information with colleagues and leadership and engaging with community as resident expert.
• Preparing reports and consulting with customers and other stakeholders to advise on technical issues, provide operational support, respond to questions, and offer status updates.
• Developing Dev Ops Sec  (CI/CD) pipelines and incorporating security protocols while deploying infrastructure as code (IaC)
• Supporting security control assessments.
• Identifying opportunities to refine current and/or implement new security processes to continuously improve the program’s overall security posture.

• Bachelor’s degree in science, technology, engineering, and math (STEM) field and nine (9) years IT security (Cybersecurity) experience; OR No Bachelor’s Degree with eleven (11) or more years of IT security (Cybersecurity) experience
• Excellent communication skills, both verbal and written
• Ability to discuss technical issues with non-technical, executive-level government officials

Certifications:

• Certified Application Security Engineer (CASE) Certification or Certified Secure Software Lifecycle Professional (CSSLP) Certification.
• Certified Ethical Hacker (CEH) Certification or Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP).
• AWS Certified Solutions Architect Professional or AWS Certified Dev Ops Engineer Professional.

Experience:

• Dev Sec Ops  & CI/CD
  :
  Git Lab CI, Jira, Jenkins, Docker, Kubernetes, Infrastructure as Code (Terraform, Cloud Formation), automated security scans, blue-green deployments, branching strategy and implementation.
• Cloud‑computing
  : concepts, capabilities, and applications as they relate to storage, processing, and dissemination and overall security.
• Cross‑Team Collaboration
  :
  Working with multi-disciplinary teams to fulfill stakeholder requirements.
• Security & Compliance
  : NIST, FISMA, CIS Benchmarks, Zero Trust, FedRAMP, secure code reviews (SAST/DAST), incident response, threat modeling, vulnerability assessment, IDS/IPS (Snort/Suricata)
• Programming & Automation
  :
  Python, Java, Bash, Power Shell, scripted workflows, data parsing, security tooling
• Data & Analytics
  : SQL (MySQL, Postgre
  
  SQL), No
  
  SQL (Mongo
  
  DB, Dynamo
  
  DB), Splunk, ELK Stack, Tableau, real‑time logging/monitoring
• Leadership & Collaboration
  :
  Resource management, cross-functional coordination, Agile/Scrum methodologies, continuous improvement, mentorship
• Application Programming
  :
  Building web application programming interfaces (API) using…