Software Security Engineer - Remote

Overview

The Software Security Engineer will enhance data security protections by evaluating USPTO systems, focusing on sensitive Business Impact Information (BII) systems that contain Intellectual Property (IP) and PII.

In Short

• Perform code reviews to identify flaws in applications handling sensitive IP data.
• Drive configuration auditing for misconfigurations or insecure settings.
• Execute access controls to validate internal access controls.
• Generate reports highlighting security weaknesses and remediation steps.
• Ensure critical issues are resolved before software releases.
• Research and coordinate conversion and CI/CD pipelines.
• Design and develop new software products for security operations.
• Assess cloud security architectures and recommend improvements.
• Consult with project teams to identify application requirements.
• Assist in evaluating application software packages and testing tools.

Requirements

• 5+ years of relevant experience.
• Bachelor’s degree or equivalent experience.
• Experience with security architecture reviews.
• Knowledge of DevSecOps CI/CD pipelines.
• Extensive experience with white-box testing methodologies.
• Familiarity with static and dynamic application security testing tools.
• Understanding of the MITRE ATT&CK Framework.
• Experience with vulnerability assessment tools.
• Deep understanding of the OSI model.
• Proficient in web application infrastructure.

Benefits

• Opportunity to work on critical national security projects.
• Collaborative work environment with elite minds.
• Flexible working conditions.
• Professional development opportunities.
• Engagement in innovative technology solutions.