Junior Software Engineer - IRES

Full time | Geo Control Systems, Inc. | United States

You can verify whether you reside in a HUBZone by using the following website:

The Junior Software Engineer supports the Missile Defense Agency (MDA) on the Integrated Research and Development for Enterprise Solutions (IRES) contract. The candidate will:

• Learn to perform software security audits identifying risks associated with software and provide a comprehensive security assessment for the MDA IC ISSM. This will include known vulnerabilities published to the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD).
• Discover and compile a list of dependencies/bill of materials for software being audited.
• Use a variety of tools to discover vulnerabilities within a software application.
• Use various programming/scripting/query languages to correlate industry best practices for secure software development.
• Identify common security issues including input validation, error and exception handling, logging, access controls, SQL Injection, cross-site scripting (XSS), etc. and articulate how to mitigate or reduce their impact.
• Help correlate Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) vulnerabilities and other policies with vulnerabilities discovered and documenting them to be consumable by a wide audience.
• Monitor a queue of requests for software security audits.
• Assist with developing reporting metrics for team activities.
• Occasional Interaction with requesters of varied backgrounds
  62 to determine use‑case scenarios, understand application architecture and to help determine risk mitigation strategies.

The successful candidate will:

• Be able to independently perform all aspects of software code auditing.
• Have the ability to translate technical data into a format understood by individuals from varied backgrounds.
• Be articulate, in both written and verbal communication, able to brief senior Contract and Government leadership.
• Work in a fast‑paced, high‑pressure, changing environment.
• Be able to use the STIG viewer and identify, understand and apply STIGs required for review of the software.
• Have a strong commitment to a team environment.
• Possess a willingness to learn new technologies.
• Have the ability to de‑conflict request/requirements.

Resumes, in month and year format, must be submitted with application in order to be considered for the position. The selected candidate may be assigned as an employee for one of our teammate companies.

Basic Requirements:

• Must have 6, or more, months of IT related experience.
• Must be conceptually familiar with databases.
• Must be familiar with at least one programming or scripting language and know the difference between compiled and interpreted languages.
• Must be able to maintain a restricted badge and work on site 4+ days per week.
• Must have a current IAT Level II Certification (Security+ CE) or be able to obtain within 6 months of hire.
• Must have, or obtain, an votação to active DoD Secret Clearance.
• Be able to perform manual code reviews to filter out false positive results for automated code review findings.
• Be familiar with secure programming theory, common software and database security vulnerabilities, and remediation processes.
• Be proficient in using Fortify Source Code Analyzer (SCA).
• Have excellent written, verbal and interpersonal communications skills.
• Have a Microsoft Development certification such as Azure, Foundations, etc.
• Have a familiarity with the MDA and BMDS programs.

This position is expected to pay $80,000 - $100,000 annually; depending on

GCS health and welfare benefits are designed to invest in you, and in the things you care about. Your health. Your well‑being. Your security. Your future. Typical benefits offered include flexible work schedules and opportunities to work remotely, educational reimbursement, retirement benefits (401K, Roth), health benefits, tax saving options, disability benefits, life and accident insurance, voluntary benefits, paid time off and paid holidays, and parental and pregnancy leave.

Geo Control Systems, Inc. is an Equal Opportunity Employer and does not discriminate in employment on the basis of age, veteran status, disability, or any other characteristic protected by law.