Software Guidance & Assistance, Inc. (SGA) is searching for a Security Software Engineer/Developer for a contract assignment with a premier regulatory client in Rockville, MD. The role involves creating internal tools for the Cyber Information Security team, focusing on software development, AWS, and security engineering.
Responsibilities:
- Design, build, and maintain security tools and automated solutions for AWS infrastructure, applications, and development workflows
- Develop internal applications, APIs, integrations, and automation using Python, Java, Go, JavaScript, TypeScript, Bash, or similar technologies
- Develop automated remediation solutions for common AWS security findings and misconfigurations
- Build and support secure web applications, backend services, and internal security products
- Evaluate AWS services, open-source tools, and commercial security products through technical testing and proof-of-concept development
- Troubleshoot complex integrations and independently deliver projects from initial design through production support
Requirements:
- At least five years of experience in software development, security engineering, cloud security, or DevSecOps
- Strong programming experience in one or more languages, such as Python, Java, Go, JavaScript, or TypeScript
- Experience developing web applications, APIs, or backend services
- Practical experience with AWS and cloud-based application architectures
- Experience with CI/CD pipelines, source control, automated testing, and agile development practices
- An understanding of secure coding, access control, authentication, encryption, vulnerability management, and common application security risks
- Strong communication, organizational, and problem-solving skills
- A bachelor's degree in computer science, cybersecurity, information systems, or STEM field, or equivalent professional experience
- Experience with AWS services such as Lambda, Step Functions, CloudFormation, SNS, SQS, ECS, EC2 and Infrastructure-as-Code tools
- Experience with Python, Java, Spring Boot, Docker/Containers, and Serverless technologies