Volpe Information Technology Group Secure Software Engineer Remote · Full time Apply for Secure Software Engineer

Secure Software Engineer at Volpe Information Technology Group

Volpe Information Technology Group Secure Software Engineer Remote

• Full time Apply for Secure Software Engineer

Perform code review and audit application source code scans for security vulnerabilities

About Volpe Information Technology Group

Volpe Information Technology Group (VITG) is a Baltimore, MD based small business providing information technology (IT) consulting services to commercial and federal government customers. VITG is customer centric, focusing on the specific needs of our customers and tailoring our services to match their business. With a core focus on cyber security, VITG delivers next generation IT solutions that remain resilient in today’s dynamic threat environment. Our management team averages 20 plus years of industry service. VITG believes that our proprietary processes, technology, and technical discipline along with our experienced, highly skilled employees are the driving factor behind client satisfaction and the performance of our portfolios. The typical technical employee is well educated, often with an industry certification, and has experience in systems engineering and project management. VITGs’ services include Secure Software Development, Cyber Security Consulting, and Information Security Program Development and Support.

Description

Required Skills

• 2+ years of software development experience with any one of the object oriented programming languages like Java, Ruby, C#.
• Git and Linux/Unix Commands.
• Knowledge and understanding of Secure Code practices.
• Perform code review and audit application source code scans for security vulnerabilities, and identify True Positives and False Positives.
• Providing guidance to development community for resolving the vulnerabilities. Should be able to interact on daily basis with development community on the security issues of their applications.
• Understanding of source code vulnerabilities such as Cross-Site Scripting, SQL Injection, Heap Inspection, DOM Injection, SSRF (Server-Side Request Forgery), XSRF (Cross-Site Request Forgery) etc.
• Should be able to research on third party library vulnerable and non-vulnerable packages from different sources like NIST, OWASP and provide upgrade guidance on recent non-vulnerable components.
• Understanding of Jenkins Pipeline.
• Understanding of relational databases and experience in writing SQL queries.

Required Education

• Bachelor Degree at a minimal is required to be considered for this position.

Tools

Checkmarx, blackduck, Nexus IQ, Blackduck, Eclipse, SQL Server Management Studio

Desired but not required

Desired Experience

• Ability to take a product through the entire lifecycle of analysis, design, coding, testing and implementation and support.
• Experienced with implementing all aspects of an application design – high performance design, coding, caching mechanisms, security, encryption, state management, error logging, debugging, scalability, code reviews, development environment configuration, and testing.
• Experienced with performing unit and system level testing on web applications.
• Proven track record of designing scalable, web based distributed software applications
• Experience developing software in the government sector (a plus).
• Experience or knowledge of Jenkins, Cloud, and Maven
• Experience with collaboration tools such as SharePoint
• Experience with integrating SCA code scanning into the build process
• Code scanning experience - Manual/Automated/Static/Dynamic
• Experience/exposure in major programming languages such as JAVA EE, .NET,
• COBOL, ColdFusion, etc.

Salary

$75,000 - $95,000 per year

Apply for Secure Software Engineer

Your Privacy Choices Read our Privacy Policy

By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts.

Cookies settings Reject all Accept all

Privacy Preference Center

When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.

Learn more information about your privacy

Allow all

Manage consent preferences

Strictly Necessary Cookies

Always active

These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.

Functional Cookies

Functional Cookies

These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.

Performance Cookies

Performance Cookies

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.

Targeting Cookies

Targeting Cookies

These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

Cookie List

Clear checkbox label label

Apply Cancel

Consent Leg.Interest

checkbox label label

checkbox label label

checkbox label label

Reject all Confirm my choices