Vulnerability Assessment SME

Edgewater Federal Solutions Sector is seeking a Vulnerability Assessment SME for the Department of Defense (DoD).  The successful candidate will be responsible for ensuring the security of software applications through secure coding practices and code vulnerability assessments. Lead a team of application security specialists, providing guidance on secure coding practices and static/dynamic analysis methodologies. Provide guidance to development teams on secure coding techniques and remediation strategies for identified vulnerabilities. Oversee the execution of application security assessments, including code reviews and vulnerability scans, to identify security flaws in software applications. Provide actionable recommendations to development teams and stakeholders, based on assessment findings, to improve application security and mitigate identified risks. Develop and maintain application security procedures to promote secure software development practices. This position requires a current Top Secret clearance to be consideredKnowledge, Skills, and AbilitiesSecure Coding Practices and Standards:  Expertise in secure software development methodologies, including OWASP Secure SDLC, OWASP Top 10, and CWE/SANS Top 25 vulnerabilities.Static and Dynamic Application Security Testing (SAST/DAST):  Proficient in using and configuring tools like Fortify, SonarQube, OWASP ZAP, Burp Suite, and Checkmarx for vulnerability detection.Application Vulnerability Assessment and Risk Management:  Skilled in identifying, analyzing, prioritizing, and remediating software vulnerabilities across various applications and environments.Programming and Framework Expertise:  In-depth knowledge of programming languages (e.g., Java, Python, C , JavaScript) and their associated vulnerabilities, as well as secure coding practices within frameworks like Spring and Django.Leadership and Team Collaboration:  Strong ability to lead, mentor, and guide a team of application security specialists, as well as collaborate effectively with development and stakeholder teams.Threat Modeling and Intelligence Integration:  Proficient in performing threat modeling, incorporating threat intelligence into assessments, and adapting secure practices to address evolving attack vectors.Compliance and DoD Standards Expertise:  Familiarity with DoD frameworks (e.g., DISA STIGs, RMF, FISMA), ensuring software security practices meet federal and organizational compliance requirements.DevSecOps and Automation Proficiency:  Skilled in integrating security tools and practices into CI/CD pipelines and using scripting languages (e.g., Python, PowerShell, Bash) for process automation.Effective Communication and Documentation:  Ability to clearly communicate technical security risks to non-technical stakeholders and develop comprehensive security procedures, playbooks, and training materials.Continuous Improvement and Emerging Technology Knowledge:  Capacity to assess and integrate new tools and techniques into software security operations while staying current with emerging application risks and best practices.Bachelor's degree in technical discipline, or related field and/or 10-years’ experience in progressively more complex roles in software development, vulnerability analysis, and/or application security managementClearance Requirement: Top SecretCompTIA Security Certified Information Systems Security Professional (CISSP)Company DescriptionEdgewater Federal Solutions is a privately held government contracting firm located in Frederick, MD. The company was founded in 2002 with the vision of being highly recognized and admired for supporting customer missions through employee empowerment, exceptional services and timely delivery. Edgewater Federal Solutions is ISO 9001, 20000-1, 270001 certified, appraised at CMMI Level 3 Maturity for Development and Services, and has been named in the Top Workplaces in the Greater Washington Area Small Companies for 2018 through 2025.It has been and continues to be the policy of Edgewater Federal Solutions to provide equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, marital status, veteran status, and/or other statuses protected by applicable law.

Salary : $150,000 - $200,000