Software Security Engineer - DevSecOps, SME

Would you like to perform rewarding work while contributing to the success of an established, growing company? Navstar is an award-winning organization that has a proven track record of successfully providing IT services and solutions both as a prime and sub-contractor on mission-focused IT programs. Our employees are integral players in support of mission-critical programs focused on our National Security.

Role Description:

Navstar is seeking an experienced, hands-on Software Security Engineer to design, develop, and implement secure software solutions supporting an enterprise AWS cloud migration and modernization initiative. This is a working software engineering role requiring deep cybersecurity expertise and a strong emphasis on writing, testing, reviewing, and maintaining secure code. The selected candidate will translate cybersecurity policies, security requirements, and technical controls into functional software, automated security solutions, and secure development practices. The ideal candidate combines SME-level software engineering capabilities with advanced cybersecurity knowledge. They must be equally comfortable developing production-quality software, identifying and remediating vulnerabilities, and engineering security directly into applications, cloud infrastructure, and deployment workflows. Position Responsibilities

• Write, test, review, and maintain secure, production-quality software aligned with enterprise cybersecurity policies and technical security requirements.
• Design and develop software solutions that implement cybersecurity controls directly into applications, APIs, and cloud services.
• Translate security policies, compliance requirements, and vulnerability findings into actionable, code-based solutions.
• Develop secure applications and automation using Python, Java, Go, or comparable programming languages.
• Identify, analyze, and remediate software vulnerabilities through secure coding, code reviews, and security testing.
• Build and integrate automated security controls, vulnerability scanning, and policy enforcement into CI/CD pipelines.
• Implement secure authentication, authorization, encryption, secrets management, and identity and access controls.
• Engineer security solutions supporting AWS, Amazon EKS, Kubernetes, and containerized application environments.
• Develop reusable security automation, Infrastructure as Code, and policy-as-code solutions.
• Collaborate with software developers, cloud architects, and DevOps engineers to embed cybersecurity requirements throughout the software development lifecycle.
• Troubleshoot complex security issues across application code, cloud infrastructure, containers, and deployment pipelines.
• Serve as a technical SME for secure software development, application security architecture, and cybersecurity engineering while remaining directly responsible for implementation and delivery.

Required Skills and Qualifications:

• To be eligible for this position you must hold an active TS/SCI.
• Active TS/SCI U.S. Security Clearance.
• 10+ years of relevant experience in software engineering, application security, cybersecurity engineering, or DevSecOps.
• Associate degree or higher in Computer Science, Software Engineering, Cybersecurity, IT, or a related technical field.
• Expert-level hands-on software development experience with Python, Java, Go, or comparable programming languages.
• Demonstrated experience designing, writing, testing, and maintaining secure production-quality software.
• Deep understanding of application security, secure coding practices, software vulnerabilities, and cybersecurity engineering principles.
• Experience translating cybersecurity requirements and security policies into functional code and automated technical controls.
• Hands-on experience developing or securing applications within AWS cloud environments.
• Practical experience with Docker, Kubernetes, CI/CD pipelines, and Infrastructure as Code.
• Experience implementing application security testing, vulnerability remediation, and automated security enforcement.
• Strong understanding of authentication, authorization, encryption, identity management, API security, and secrets management.
• Working knowledge of NIST security frameworks, OWASP, and secure software development standards.
• Proven ability to independently diagnose security vulnerabilities and develop code-based solutions.
• Ability to work 100% onsite in Sterling, VA, with up to 25% CONUS travel.

Desired Skills and Qualifications:

• Experience securing enterprise AWS cloud migrations and modernization initiatives.
• Experience with Amazon EKS, Terraform, Helm, and Kubernetes security.
• Experience implementing DevSecOps automation, SAST/DAST, dependency scanning, and policy-as-code.
• Familiarity with NIST SP 800-53, NIST SSDF, FedRAMP, and zero-trust security principles.
• Experience developing security automation using AWS IAM, KMS, Secrets Manager, CloudTrail, and related services.
• Experience with software supply chain security, container security, and secure CI/CD architectures.
• Experience supporting platforms in restricted or disconnected environments.
• AWS, CSSLP, CISSP, or other relevant cybersecurity certifications.
• Previous experience supporting IC or DoD programs and greenfield development efforts.

Pay Rate:

In compliance with Virginia's Equal Pay for Equal Work law, the annual base salary range for this position is $190,000 - $240,000. This range represents the base pay for this role and is provided in accordance with Maryland’s requirements to disclose compensation in job postings. Please note that actual compensation may vary based on factors such as (but not limited to) the scope and responsibilities of the role, the candidate’s qualifications, experience, education, skills, internal equity, and market conditions. In addition to base salary, candidates hired into this position may be eligible for a hiring bonus of $10,000.00, subject to applicable contingencies and Navstar policy. About Navstar For 20 years Navstar has provided high-quality Innovative Technology Services and Solutions throughout the Intelligence Community. We would not have achieved the success we have without the best AllStar team; this is not just a place to work, Navstar is a community. At Navstar everything we do revolves around listening to both our customers and employees, delivering the results they expect, and being a trusted partner as both a prime and subcontractor. We have a proven track record of successfully providing innovative technology services and solutions on highly mission-focused programs; all while enjoying what we do at the same time. Security is our priority; together, we will make the nation a safer place. Benefits at Navstar

• Highly Competitive Health Care Premiums, including 100% employer paid for employee
• Flexible Spending Accounts for Medical and Dependent Care
• Generous PTO and Federal Holiday Paid Leave
• Employer Paid STD/LTD
• Employer Paid Life Insurance
• 401K plan and Employer Match
• Referral and Opportunity Referral Programs
• Professional Development Assistance

EOE/M/F/Vet/Disabled Navstar, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, age, religious beliefs, national origin, disability, U.S. veteran status, or any other legally protected characteristics under federal, state or local law.