Secure Software Assessor

St. Louis, Missouri

Job ID: 4948

CALIBRE Systems Inc., an employee-owned Management Consulting and Digital Transformation Company is seeking a Secure Software Assessor (Mid-level) that analyzes the security of new or existing computer applications, software, or specialized utility programs and provides actionable results.

The Secure Software Assessor's responsibilities include, but are not limited to, the following:

• Apply coding and testing standards, apply security testing tools including "'fuzzing" static-analysis code scanning tools, and conduct code reviews.
• Apply secure code documentation.
• Capture security controls used during the requirements phase to integrate security within the process, to identify key security objectives, and to maximize software security while minimizing disruption to plans and schedules.
• Develop threat model based on customer interviews and requirements.
• Consult with engineering staff to evaluate interface between hardware and software.
• Evaluate factors such as reporting formats required, cost constraints, and need for security restrictions to determine hardware configuration.
• Identify basic common coding flaws at a high level.
• Identify security implications and apply methodologies within centralized and decentralized environments across the enterprise's computer systems in software development.
• Identify security issues around steady state operation and management of software and incorporate security measures that must be taken when a product reaches its end of life.
• Perform integrated quality assurance testing for security functionality and resiliency attack.
• Perform risk analysis (e.g., threat, vulnerability, and probability of occurrence) whenever an application or system undergoes a major change.
• Address security implications in the software acceptance phase including completion criteria, risk acceptance and documentation, common criteria, and methods of independent testing.
• Store, retrieve, and manipulate data for analysis of system capabilities and requirements.
• Translate security requirements into application design elements including documenting the elements of the software attack surfaces, conducting threat modeling, and defining any specific security criteria. Perform penetration testing as required for new or updated applications.
• Consult with customers about software system design and maintenance

Required Skills

• Ability to use and understand complex mathematical concepts (e.g., discrete math).
• Ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• Ability to identify critical infrastructure systems with information communication technology that were designed without system security considerations.

required Experience

• US citizen
• Active Top Secret/Sensitive Compartmented Information (TS/SCI) clearance, eligible for Counterintelligence (CI) Polygraph.
•  IASAE Level 2 certification 
• Bachelor’s degree or higher from an accredited college or university in Computer Science, Cyber Security, Information Technology, Software Engineering, Information Systems, or Computer Engineering degree; or a degree in a Mathematics or Engineering field.
• Possible travel within the Continental United States (CONUS) and Outside CONUS (OCONUS).

CALIBRE is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, age, marital status, pregnancy, genetic information, or other legally protected status. For our EEO Policy statement, please click here. If you would like more information on your EEO rights under the law, please click here.

If you would like to contact us regarding the accessibility of our website of need assistance completing the application process, please contact accommodations@calibresys.com or call 703.797.8732. Please note this contact information is for accommodations only.