Senior Cybersecurity Engineer - Software Assurance

Cryptography, ICAM, & System Assurance Department Position At MITRE, your passion fuels work that impacts our nation and improves lives. This is where your skills strengthen national security, cybersecurity, health, transportation, and citizen services. We're a nonprofit engineering, applied research, and advanced technology organization working in the public interest. With objectivity and integrity at our core, we lead federally funded research and development centers for U.S. government agencies – collaborating with industry and academia to deliver integrated, high-impact solutions that advance our nation's health, security, and prosperity. Our people tackle the toughest technical challenges, supported by competitive benefits, meaningful career development, and a culture of innovation, collaboration, and technical excellence. Choose MITRE for a career with purpose — and help shape the future. The Cryptography, ICAM, & System Assurance department is comprised of an inspired multi-disciplinary team of researchers and practitioners driving innovation in the department's technical areas of focus, with particular emphasis in Cryptography; Software Assurance (SwA); and Identity, Credential and Access Management (ICAM). We develop and apply scalable approaches for systems and software, evaluate technology and solutions, lead and foster external partnerships within the communities we support, and conduct novel research and development. We serve in critical roles including: Conceive of and advance novel technical ideas, Provide deep analyses whose results drive decision-making by our sponsors, Build proof-of-concept systems that leverage new technology and concepts, and Engage with the vendor community, academia, and our sponsors to raise the bar on cyber security throughout the industry. Roles & Responsibilities: As a member of the Cryptography, ICAM, & System Assurance department in the Cyber Engineering Division, you will join an inspired team supporting developers and security researchers around the world. We are seeking a qualified candidate for a technical position involving the application of core capabilities in Software Assurance and Secure Coding, the implementation of these into modern DevSecOps processes, and the integration of AI technologies throughout this constantly changing domain. We are looking for an individual with the hard-to-find combination of hands-on software development and application security practice. The successful candidate will directly contribute to the technical work for our sponsors and take an active role in overall team dynamics and eventual leadership. Expected responsibilities include: Providing thought leadership in Software Assurance both within MITRE and for our sponsors, Assisting sponsors in implementing Software Assurance best practices within their operational environments, Conducting research into novel software/hardware weaknesses and attack patterns, Increasing the impact of the CWE program by expanding and improving technical content, Performing static analysis on source code to support a range of use cases, Researching ways to improve traditional SwA techniques by leveraging the newest AI technologies, Implementing prototype systems to manage Software Bill of Materials (SBOMs), and Helping to advance related research projects, bringing your unique knowledge to bear. Basic Qualifications: A minimum of 5 years of related experience with a bachelor's degree; or 3 years and a master's degree; or a PhD with relevant experience who can immediately contribute at this job step; or equivalent combination of related education and work experience. Experience in secure application development and software assurance Knowledgeable about static and dynamic application security testing (SAST/DAST) Demonstrated experience collaborating successfully with teams Demonstrated examples of building and leveraging relationships that had a positive impact on the work Track record of impactful work that made a difference Strong analytical and problem-solving skills and proactive, critical thinking skills Excellent written/verbal communications skills This position requires the ability to obtain a top secret clearance Per the U.S. Government's eligibility requirements for a clearance, U.S. Citizenship is required. This position requires a minimum of 3 days a week on-site. Preferred Qualifications: Bachelor's degree in computer science, Software Engineering, Cyber Security, or related technical field of study Previous experience as a software or cyber security engineer Familiarity with cyber security principles, concepts and technologies Working knowledge of standards for describing and prioritizing vulnerabilities and weaknesses (i.e., CVE, CVSS, CWE) Deep technical understanding of one or more software analysis areas (e.g., static code analysis, symbolic execution, or binary analysis) Familiarity with Python, C, C++, C#, Rust, GoLang and other current development languages Prior involvement in performing software/hardware design, architecture, and/or code reviews Ability to possess and maintain a DoD Top Secret clearance This requisition requires the candidate to have a minimum of the following clearance(s): Secret This requisition requires the hired candidate to have or obtain, within one year from the date of hire, the following clearance(s): Secret Salary compensation range and midpoint: $129,200 - $161,500 - $193,800 Annual Work Location Type: Onsite Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local or international law. MITRE