Senior Software Security Engineer

Role Description

ICF is seeking an experienced and driven Software Security Engineer to lead and oversee mission-critical initiatives in support of the Defense Counterintelligence and Security Agency (DCSA). In this role, you will help safeguard applications and cloud-based systems by integrating security best practices throughout the software development lifecycle.

Job Location: This position is remote. If you accept this position, you should note that ICF does monitor employee work locations and blocks access from foreign locations/foreign IP addresses and also prohibits personal VPN connections. You may be asked to travel once a quarter to an office or client site. Our core work hours are 8am - 5pm Eastern Time with the option to start earlier or work later depending on your time zone.

What You Will Do

• Proactively monitor and assess application and system security to identify vulnerabilities and potential threats.
• Perform secure code reviews and static/dynamic analysis to strengthen application security and ensure adherence to secure coding standards.
• Test and evaluate security tools, applications, and system configurations to validate compliance with federal and DoD security requirements.
• Investigate and remediate potential security vulnerabilities, recommending and implementing corrective actions to reduce risk.
• Design and implement security controls, tools, and automation to enhance protection across cloud and on-premise environments.
• Provide guidance and training to development teams on secure coding practices and DevSecOps principles.
• Develop and maintain technical documentation related to security architecture, risk findings, and mitigation strategies.
• Prepare and deliver executive-level briefings, status reports, and performance updates to government stakeholders and corporate leadership.
• Maintain a positive, results-oriented work environment by building partnerships with internal and external partners.

Qualifications

• Active Top Secret clearance.
• Proven experience (5+ years) in application security, secure software development, or cybersecurity engineering.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related technical field.
• 2 years’ experience working with DCSA.
• 5 years’ experience with working on/around cloud platforms in AWS.
• Hands-on experience performing secure code reviews and vulnerability assessments using industry-standard tools (e.g., SAST, DAST, SCA).
• Experience implementing security controls in cloud environments (e.g., AWS GovCloud or similar secure federal cloud environments).
• Strong understanding of secure coding standards (e.g., OWASP, NIST, DoD STIGs).
• Experience supporting systems within regulated or high-security environments.
• Ability to self-organize, prioritize, and conduct research on multiple projects under tight deadlines in a fast-paced environment.
• An ability to communicate and write clearly in English.

Professional Skills

• Highly effective analytical, problem-solving, and decision-making capabilities.
• Excellent communication and interpersonal skills to interface effectively at all levels of the business.

Pay Range

The pay range for this position based on full-time employment is: $119,323.00 - $202,850.00 Nationwide Remote Office (US99).