Software Security Engineer – TS/SCI Clearance

CDW

. Perform manual security reviews of source code, pull requests, and application changes .

Posted 11/5/2026full-timeSatellite Beach • Florida • United StatesMid-LevelSenior💰 $190,000 - $230,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application security through manual code reviews, vulnerability assessments, and integration of security practices into CI/CD workflows. Proficient in interpreting security requirements and providing actionable guidance to developers while maintaining compliance with NIST standards and DISA STIG requirements.

Highest-signal resume keywords

Active TS/SCI ClearanceProficiency In Java, C#, Python, JavaScript/TypeScript, C/C++, Or GoExperience With Application Security Testing ToolsUnderstanding Of NIST SP 800-53 Controls And DISA STIG ChecksExperience Supporting RMF Or ATO Processes

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Manual Security ReviewsApplication Security AssessmentsCode Review ChecklistsSAST, DAST, SCA, And Secrets ScanningAuthentication And Authorization ReviewWeb Application And API SecuritySecure Coding StandardsVulnerability AnalysisTechnical DocumentationRemediation Verification

Soft Skills

Clear CommunicationCollaboration With DevelopersProblem-SolvingAttention To DetailRisk Management

Tools & Technologies

FortifyCheckmarxCodeQLVeracodeSonarQubeSnykOWASP ZAPGit-Based Version ControlCI/CD WorkflowsCloud-Native Applications

Certifications & Qualifications

CSSLPRelevant Secure Software Development Certifications

Industry Keywords

NIST SP 800-53NIST SSDFDISA Application Security And Development STIGOWASP ASVSOWASP Top 10CWERisk-Based Vulnerability PrioritizationFederal Civilian Or Defense Software ProgramsApplication Security ReviewsSoftware Supply Chain Security

Tech Stack

Tools & technologies

CloudCyber SecurityJavaJavaScriptPythonTypeScriptC++Go

About the role

Key responsibilities & impact

Perform manual security reviews of source code, pull requests, and application changes
Assess application security against approved security baselines, NIST SP 800-53 controls, NIST SSDF practices, agency-specific requirements, and DISA Application Security and Development STIG requirements
Translate controls and security requirements into code review checklists, testable acceptance criteria, and developer guidance
Review authentication, authorization, input validation, session management, error handling, audit logging, secrets management, data protection, and cryptographic implementations
Execute and interpret SAST, DAST, SCA, and secrets scanning; validate findings and distinguish vulnerabilities from false positives
Evaluate third-party and open-source dependencies and support software component inventory and SBOM activities
Partner with developers on code-level fixes, review remediation changes, and verify closure through retesting and regression testing
Participate in threat modeling and application architecture reviews
Integrate automated security checks and security gates into CI/CD workflows
Document findings, technical impact, requirements, remediation recommendations, and verification evidence
Support RMF assessments and ATO activities with application security evidence and remediation status
Communicate unresolved risks and release-readiness recommendations; escalate exceptions through the risk acceptance process
Maintain secure coding standards and provide practical guidance to developers

Requirements

What you’ll need

Active TS/SCI Clearance
Professional software engineering experience developing, testing, debugging, and maintaining production applications, with demonstrated hands-on secure code review or application security experience
Proficiency in one or more programming languages such as Java, C#, Python, JavaScript/TypeScript, C/C++, or Go, and ability to understand unfamiliar codebases
Working knowledge of NIST SP 800-53 controls and NIST SSDF practices
Ability to interpret customer-specific security requirements and DISA STIG checks where applicable
Strong understanding of common application vulnerabilities, including injection, broken access control, insecure authentication, insecure deserialization, and sensitive data exposure
Experience using application security testing tools and validating results through code analysis
Experience with Git-based version control, peer code review, automated testing, and CI/CD workflows
Understanding of web application and API security, least privilege, secure credential handling, and data protection in transit and at rest
Ability to produce clear technical findings and maintain traceability between requirements, implementation, testing, and remediation evidence
Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, or related discipline, or equivalent practical experience
Experience supporting federal civilian or defense software programs, including application security reviews within RMF or ATO processes
Hands-on experience applying the DISA Application Security and Development STIG and preparing supporting assessment evidence
Experience with Fortify, Checkmarx, CodeQL, Veracode, SonarQube, Snyk, OWASP ZAP, or comparable application security platforms
Experience with cloud-native applications, containers, infrastructure as code, and software supply chain security
Familiarity with OWASP ASVS, OWASP Top 10, CWE, and risk-based vulnerability prioritization
Relevant secure software development or application security certifications, such as CSSLP or equivalent credential

Benefits

Comp & perks

Benefits overview: https://cdw.benefit-info.com/
Salary ranges may be subject to geographic differentials
AI-fluent organization with opportunities to engage with evolving technology and tools
Equitable, transparent, and respectful hiring process
Collaborative environment where work matters, growth is supported, and contributions shape what’s next