Description
Software Engineer SME (Artifact Management & Secure Development Specialist) – TS/SCI Xcelerate Solutions is seeking an Artifact Management and Secure Software Development Specialist SME Software Engineer for this effort will be responsible for providing guidance and targeted assistance in migrating NCIS Mission Applications to a secure software development toolchain and ensuring compliance with DON-CIO policies regarding secure software development practices and products.
Location:
Quantico, VA. Hybrid remote schedule. Must be local and able to meet onsite 1-2 times per week or as required.
Clearance:
TS/SCI
Key Responsibilities:
- Design, develop, implement, and maintain secure, scalable, full-stack software applications supporting mission-critical enterprise systems, with a focus on Secure Development Operations (SecDevOps) principles.
- Develop and maintain software applications using compiled and interpreted programming languages while ensuring compliance with secure coding standards and enterprise security requirements.
- Design, develop, and optimize relational and NoSQL database solutions to support application functionality, performance, data integrity, and security.
- Establish, implement, and enforce secure coding standards, including code quality, Zero Trust security principles, Software Bill of Materials (SBOM), and secure dependency management.
- Configure, administer, and maintain software artifact management repositories using Nexus, JFrog Artifactory, NuGet, or comparable technologies to ensure secure storage, version control, and distribution of software components.
- Implement and maintain Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and code quality tools, including SonarQube, Aikido, CodeQL, or equivalent platforms, based on their supported capabilities.
- Integrate automated security scanning, code quality assessments, vulnerability detection, and dependency analysis into CI/CD pipelines to strengthen application security throughout the software development lifecycle.
- Establish and enforce Git-based source control practices, including pre-commit hooks, branch protection policies, pull request reviews, and automated code validation.
- Implement secure software supply chain practices to ensure software dependencies, third-party libraries, and application artifacts meet organizational security and compliance requirements.
- Identify, assess, prioritize, and remediate software vulnerabilities, insecure dependencies, and code quality issues to reduce security risks across enterprise applications.
- Collaborate with DevSecOps engineers, cybersecurity personnel, infrastructure teams, and Mission Application developers to implement consistent security controls and secure development practices.
- Provide technical guidance and mentorship to Mission Application developers on secure coding methodologies, application security, vulnerability remediation, and compliance requirements.
- Apply software engineering and security principles across diverse programming languages, operating systems, development frameworks, and hosting environments.
- Evaluate and implement emerging technologies, security tools, and development methodologies to address evolving mission requirements and improve software engineering capabilities.
- Support security assessments, accreditation activities, and compliance reviews by maintaining software security documentation, SBOM records, vulnerability reports, and evidence of implemented security controls.
- Develop and maintain secure software development procedures, technical documentation, coding standards, and best practices to support consistent implementation across the enterprise.
- Promote a culture of security awareness, accountability, and continuous compliance by establishing repeatable processes and encouraging sustained adoption of secure software development standards.
Minimum Requirements:
- High School with 10+ years (or commensurate experience)
- Clearance Required: Top Secret/SCI
- Expertise in Secure Software Development (SecDevOps focus) across a full-stack domain, including database (relational and NoSQL) and application development (compiled and interpreted languages)
- Expertise in secure coding practices (including code quality, Zero Trust, SBOM, and secure dependency management)
- Expertise with artifact management toolsets (Nexus, Artifactory, NuGet, etc) and SAST/DAST code quality platforms (SonarQube, Aikido, CodeQL, or similar) and Git-oriented supporting capabilities (such as pre-commit hooks and branch management rules)
- Must be comfortable applying software engineering principles to disparate languages, operating systems, and hosting environments holistically, learning new technologies as needed to support emergent mission needs, and providing guidance to Mission Application developers to build a culture of compliance regarding sustained implementation of such objectives. Shares overlap/redundancy with other two SME software developer positions.
- IAT II Certification
About Xcelerate Solutions:
Founded in 2009 and headquartered in McLean, VA, Xcelerate Solutions (www.xceleratesolutions.com) is one of America's fastest-growing companies. Xcelerate’s culture is defined by our diversified workforce of dynamic and versatile professionals, supported with growth and development opportunities that contribute to individual and company growth. This strong commitment to our employees has been recognized by our inclusion on the Washington Business Journal’s “50 Best Places to Work” list as well as being a “Great Place to Work” certified company with a 4.6 star, and a 99% CEO approval Glassdoor rating. Come find out why Xcelerate Solutions is one of the top DC Metro employers! Xcelerate Solutions is an Equal Employment Opportunity/Affirmative Action Employer. We evaluate qualified applicants without regard to race, color, national origin, religion, age, equal pay, disability, veteran status, sex, sexual orientation, gender identity, genetic information, or expression of another protected characteristic. As part of this commitment to the full inclusion of all qualified individuals, Xcelerate provides reasonable accommodations if needed because of an applicant's or an employee's disability.
Pay Transparency Notice: Xcelerate Solutions will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.