Position Summary
We are seeking a Security Software Developer to design, develop, test, and maintain secure software solutions. In this role, you will work with engineering, product, and security colleagues to build security into applications throughout the software development lifecycle. The ideal candidate brings strong software development skills, knowledge of secure coding practices, and a practical approach to identifying and addressing security risks.
Key Responsibilities
Design, develop, test, and maintain secure software applications and services in accordance with requirements and engineering standards
Translate product, business, and security requirements into technical designs, implementation plans, and maintainable code
Apply secure coding practices and integrate security considerations throughout the software development lifecycle
Identify, assess, and help remediate software vulnerabilities and security weaknesses
Review code and provide constructive feedback on software quality, security, and maintainability
Develop and maintain automated tests, including tests that validate security requirements
Work with security and engineering teams to investigate software security issues and recommend practical solutions
Contribute to application architecture and technical decisions, considering security, reliability, scalability, and maintainability
Support secure build, integration, deployment, and release processes
Document security requirements, technical designs, implementation details, and remediation activities
Assess technical risks and dependencies, and communicate progress and potential security concerns clearly
Keep up to date with software security practices, emerging threats, and relevant tools and technologies
Required Qualifications
Professional experience developing and delivering production software applications
Strong programming experience in one or more relevant languages, such as Java, C#, Python, JavaScript, or TypeScript
Knowledge of software development principles, data structures, algorithms, and object-oriented or functional programming concepts
Experience designing and working with APIs, databases, and application integrations
Understanding of secure coding principles and common software security risks
Experience using version control systems and participating in code reviews
Knowledge of software testing practices, including unit, integration, or end-to-end testing
Ability to troubleshoot complex issues and develop clear, practical solutions
Strong communication and collaboration skills, including the ability to explain technical and security concepts to varied audiences
Ability to manage priorities, work independently, and deliver high-quality work to agreed timelines
Preferred Qualifications
Experience with application security testing, vulnerability assessment, or software security reviews
Familiarity with security testing tools and practices, such as static or dynamic application security testing
Experience developing cloud-based applications using platforms such as AWS, Microsoft Azure, or Google Cloud
Familiarity with containerisation and orchestration technologies, such as Docker or Kubernetes
Knowledge of security standards, threat modelling, and vulnerability management practices
Experience with agile software development and tools such as Jira or Azure DevOps
Relevant degree, professional certification, or equivalent practical experience in software development, cybersecurity, or a related discipline
Location and Citizenship Requirements
Location: Hybrid in-person role, DMV area
Citizenship and work authorization: Must be a U.S. citizen