Intermediate Cybersecurity Engineer – Software

Department Summary:

The Cryptography, ICAM, & System Assurance department is comprised of an inspired multi-disciplinary team of researchers and practitioners driving innovation in the department’s technical areas of focus, with particular emphasis in Cryptography; Software Assurance (SwA); and Identity, Credential and Access Management (ICAM). We develop and apply scalable approaches for systems and software, evaluate technology and solutions, lead and foster external partnerships within the communities we support, and conduct novel research and development. We serve in critical roles including:

• Conceive of and advance novel technical ideas,
• Provide deep analyses whose results drive decision-making by our sponsors,
• Build proof-of-concept systems that leverage new technology and concepts, and
• Engage with the vendor community, academia, and our sponsors to raise the bar on cyber security throughout the industry.

Roles & Responsibilities:

As a member of the Cryptography, ICAM, & System Assurance department in the Cyber Engineering Division, you will join an inspired team supporting developers and security researchers around the world.  We are seeking a qualified candidate for a technical position involving the application of core capabilities in Software Assurance and Secure Coding, the implementation of these into modern DevSecOps processes, and the integration of AI technologies throughout this constantly changing domain. We are looking for an individual with the hard-to-find combination of hands-on software development and application security practice. The successful candidate will directly contribute to the technical work for our sponsors and take an active role in overall team dynamics and eventual leadership. Expected responsibilities include:

• Assisting sponsors in implementing Software Assurance best practices within their operational environments,
• Conducting research into novel software/hardware weaknesses and attack patterns,
• Increasing the impact of the CWE program by expanding and improving technical content,
• Performing static analysis on source code to support a range of use cases,
• Researching ways to improve traditional SwA techniques by leveraging the newest AI technologies,
• Implementing prototype systems to manage Software Bill of Materials (SBOMs), and
• Helping to advance related research projects, bringing your unique knowledge to bear.

Basic Qualifications:

• Typically requires a Bachelor’s degree and a minimum of 2 years of related experience; or an advanced degree with relevant experience who can immediately contribute at this job step; or equivalent combination of related education and work experience.
• Interest in applying system assurance practices to advance organizational cybersecurity maturity
• Experience in secure application development and software assurance
• Knowledgeable about static and dynamic application security testing (SAST/DAST)
• Demonstrated experience collaborating successfully with teams
• Demonstrated examples of building and leveraging relationships that had a positive impact on the work
• Analytical and problem-solving skills and proactive, critical thinking skills
• Excellent written/verbal communications skills
• Must be eligible to obtain and maintain a Secret U.S Government issued Security Clearance. Per the U.S. Government’s eligibility requirements, you must be a U.S Citizen to be considered for a security clearance.
• This position requires a minimum of 4 days a week on-site

Preferred Qualifications:

• Bachelor’s degree in computer science, Software Engineering, Cyber Security, or related technical field of study
• Previous experience as a software or cyber security engineer
• Familiarity with cyber security principles, concepts and technologies 
• Working knowledge of standards for describing and prioritizing vulnerabilities and weaknesses (i.e., CVE, CVSS, CWE)
• Deep technical understanding of one or more software analysis areas (e.g., static code analysis, symbolic execution, or binary analysis)
• Familiarity with Python, C, C++, C#, Rust, GoLang and other current development languages
• Prior involvement in performing software/hardware design, architecture, and/or code reviews
• Ability to possess and maintain a DoD Top Secret clearance 

This requisition requires the candidate to have a minimum of the following clearance(s):

This requisition requires the hired candidate to have or obtain, within one year from the date of hire, the following clearance(s):

Salary compensation range and midpoint:

Work Location Type:

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local or international law.

MITRE intends to maintain a website that is fully accessible to all individuals. If you are unable to search or apply for jobs and would like to request a reasonable accommodation for any part of MITRE’s employment process, please email recruitinghelp@mitre.org for general support and collegerecruiting@mitre.org for intern positions. This service is for individuals requiring reasonable accommodation requests. Please note that vendor solicitations will not receive a reply.

Benefits information may be found here.