Software Assurance Engineer

Salary: $100,000 - 140,000 per year Requirements:

• We require 15+ years of professional experience in systems security engineering, software programming, or computer science, or 13+ years with a bachelors degree, or 11+ years with a masters degree.
• We need strong hands-on experience in C/C++ or C#, with the ability to read and analyze Java.
• An active TS/SCI clearance with polygraph is required.
• Preferred experience includes SwA and code-analysis tools such as Klocwork, CodeSonar, Fortify, CodePeer, IDA Pro, or Fortran-Lint.
• Familiarity with low-level architectures such as x86_64, PowerPC, and MIPS, as well as assembly language or legacy languages like Ada, is highly valued.
• Experience with Rust, or the ability to learn it quickly, is a plus.

• We use, tune, and assess automated software assurance tools to fit customer environments, improving detection while reducing false positives.
• We analyze tool outputs to identify vulnerabilities, triage findings, and promote secure coding practices throughout the development lifecycle.
• We design and run test approaches, custom scoring methods, and targeted test cases to strengthen software assurance analysis.
• We perform software security reviews and collaborate with clients and developers to recommend effective fixes for code-level vulnerabilities.
• We prepare technical documentation, detailed vulnerability reports, and risk assessments for leadership.
• We research emerging software assurance tools and techniques to continuously advance our security analysis capabilities.

• Ada
• C#
• Fortran
• Java
• Rust
• Security
• C++
• Fine-tuning
• Support

More:

We are MANTECH, seeking a motivated, career- and customer-oriented Application Security (AppSec) Engineer to join our team in Hanover, MD. In this mission-critical role supporting an Intelligence Community organization, we focus on software assurance and secure, reliable data dissemination through rigorous source code analysis. The position is part of a security-focused team working closely with clients, developers, and leadership to strengthen application security outcomes.

last updated 33 week of 2026