DARC Software Cyber Engineer

Job Description

Job Description

Job Title: DARC Software Cyber Engineer

Job Description

This role focuses on secure software engineering for a next-generation, ground-based radar system that provides 24/7, all-weather surveillance of deep space. You will design, develop, and secure Java/Spring applications within a DevSecOps environment, ensuring robust application security and vulnerability management across CI/CD pipelines. By working on DARC, you contribute directly to Space Domain Awareness and the protection of critical military and civilian space assets in geosynchronous orbit, supporting a mission that is vital to national and global security.

Responsibilities

• Design, develop, and maintain software using Java and the Spring Framework for mission-critical radar and space domain awareness applications.
• Debug existing software, identify root causes of defects, and implement effective and sustainable fixes.
• Participate in Agile development processes, including cross-functional scrum teams, sprint planning, daily stand-ups, reviews, and retrospectives.
• Analyze static and dynamic application security scan results, distinguish true security vulnerabilities from false positives or non-applicable findings, and document technical justifications.
• Draft and maintain technical remediation plans and Plans of Action and Milestones (POA&M) to address security findings.
• Apply secure coding practices during development and perform code reviews to identify and remediate common vulnerabilities.
• Integrate security gates into CI/CD pipelines and ensure that security checks are embedded in build and release processes.
• Read, interpret, and implement security requirements, translating them into clear developer-facing tasks and acceptance criteria.
• Use version control systems effectively, including branching and merging strategies, to support collaborative development in team environments.
• Work with multiple Linux distributions, particularly Red Hat Enterprise Linux and Ubuntu, to support development, deployment, and troubleshooting activities.
• Support application security and vulnerability management efforts across the software lifecycle, including identification, triage, remediation, and verification.
• Collaborate with DevSecOps teams to integrate security tooling such as SAST, SCA, and container scanning into automated pipelines.
• Contribute to the design and implementation of secure containerized environments using Docker and Kubernetes.
• Assist in maintaining software integrity and supply chain security, including dependency management, software bills of materials (SBOMs), and vendor assessment activities.
• Support compliance with relevant security frameworks and guidelines, including NIST SP 800-53 Risk Management Framework (RMF) and DISA Application Security and Development STIG.
• Participate in vulnerability lifecycle management and patching processes across development, test, and production environments.
• Help ensure appropriate handling and protection of sensitive data, including personally identifiable information (PII), classified information, and export-controlled data.
• Support or help obtain cross-domain solution (CDS) approvals for low-to-high data transfers and follow associated compliance workflows.
• Contribute to continuous improvement of security processes, tools, and standards within the software engineering organization.

Essential Skills

• Proficiency in Java development with practical experience using the Spring Framework.
• Experience debugging existing software and correcting defects in complex applications.
• Familiarity with Agile development methodologies and experience working in cross-functional scrum teams.
• Ability to analyze static and dynamic security scan results and distinguish actionable security findings from false positives or non-applicable items.
• Experience drafting technical justifications and remediation plans (POA&M) for identified security issues.
• Practical experience applying secure coding practices and conducting code reviews to identify common vulnerabilities.
• Knowledge of CI/CD pipelines and how to integrate security gates into build and release processes.
• Ability to read, interpret, and implement security requirements and translate them into developer-facing tasks and acceptance criteria.
• Experience using version control systems and implementing branching strategies in team environments.
• Experience working with multiple Linux distributions, with emphasis on Red Hat Enterprise Linux and Ubuntu.
• Experience in application security and vulnerability management within software development environments.
• Experience with DevSecOps practices and CI/CD security integration.
• Familiarity with tools and concepts such as SonarQube, Docker, Kubernetes, and CI/CD pipelines.
• Active Secret clearance.
• Relevant cybersecurity certification such as Security+.

Additional Skills & Qualifications

• Experience overseeing software integrity and supply chain security, including dependency management, SBOMs, and vendor assessment.
• Familiarity with NIST SP 800-53 Risk Management Framework (RMF) and DISA Application Security and Development STIG.
• Hands-on experience with one or more static application security testing (SAST) tools, such as SonarQube or Fortify.
• Hands-on experience with one or more software composition analysis (SCA) tools, such as Sonatype Nexus.
• Professional certifications such as CISSP or CSSLP in addition to Security+.
• Familiarity with container security and orchestration hardening, including Docker and Kubernetes, as well as image scanning tools.
• Practical knowledge of vulnerability lifecycle management and patching processes across multiple environments.
• Understanding of data protection requirements and secure handling of sensitive data, including PII, classified information, and export-controlled data.
• Experience supporting or obtaining low-to-high (CDS) transfer approvals and working within established compliance workflows.
• Experience with Python and C++ as complementary programming languages in a multi-language environment.
• Knowledge of RMF and STIG processes in support of secure system design and accreditation.

Work Environment

The role supports a highly advanced, next-generation radar system that provides continuous, all-weather surveillance of deep space and plays a critical role in Space Domain Awareness. You will work in a technology-driven environment that emphasizes cybersecurity, DevSecOps practices, and modern tooling such as CI/CD pipelines, SonarQube, Docker, Kubernetes, and Linux-based platforms including Red Hat Enterprise Linux and Ubuntu. The position follows a 9/80 work schedule, offering a compressed workweek with every other Friday off, and every Friday that is worked is performed remotely. The primary work location is in a modern facility near the Colorado Springs Airport in the COCO-1 building, with no on-base work required. The environment promotes collaboration, mission focus, and continuous improvement in both software engineering and security practices.

We reserve the right to pay above or below the posted wage based on factors unrelated to sex, race, or any other protected classification.

Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. This temporary role may be eligible for the following:

• Medical, Dental & Vision
• 401(k)/Roth
• Basic/Supplemental Life & AD&D
• Short and long-term disability
• HSA & DCFSA
• Transportation benefits
• Employee Assistance Program
• Company Paid Time off or State Sick Leave

Job Type & Location

This is a Contract position based out of Colorado Springs, CO.

Pay and Benefits

The pay range for this position is $135000.00 - $160000.00/hr.

Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.

Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: Medical, dental & vision Critical Illness, Accident, and Hospital 401(k) Retirement Plan Pre-tax and Roth post-tax contributions available Life Insurance (Voluntary Life & AD&D for the employee and dependents) Short and long-term disability Health Spending Account (HSA) Transportation benefits Employee Assistance Program Time Off/Leave (PTO, Vacation or Sick Leave)

Workplace Type

This is a fully onsite position in Colorado Springs,CO.

Application Deadline

This position is anticipated to close on Oct 12, 2026.

About Actalent

Actalent is a global leader in engineering and sciences services and talent solutions. We help visionary companies advance their engineering and science initiatives through access to specialized experts who drive scale, innovation and speed to market. With a network of almost 20,000 consultants and 5,000 clients across the U.S., Canada, Asia and Europe, Actalent serves many of the Fortune 500. We are proud to be an Engineering News-Record (ENR) Top 500 Design Firm for our engineering design services and a ClearlyRated Best of Staffing® winner for both client and talent service.

The company is an equal opportunity employer and will consider all applications withoutregard to race, sex, age, color, religion, national origin, veteran status, disability,sexual orientation, gender identity, genetic information or any characteristic protectedby law.

If you would like to request a reasonable accommodation, such as the modification oradjustment of the job application process or interviewing process due to a disability,please email View email address on us.fitly.work for other accommodation options.

San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in thecity and county of San Francisco, we will consider for employment qualified applicantswith arrest and conviction records.

Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as acondition of employment or continued employment. An employer who violates this lawshall be subject to criminal penalties and civil liability.

Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process,including sourcing, screening, and evaluating candidates. AI helps assess applicationsand qualifications, but final decisions are made by our hiring team. By applying, youacknowledge and agree that your application may be reviewed using AI tools.