This site uses cookies. To find out more, see our Cookies Policy

Secure Code Reviewer in Orlando, FL at ManTech

Date Posted: 6/13/2018

Job Snapshot

  • Employee Type:
    Full-Time
  • Location:
    Orlando, FL
  • Job Type:
    Other
  • Experience:
    Not Specified
  • Date Posted:
    6/13/2018

Job Description

Group:


MSS

Clearance Level Needed:


None

Shift:


Day

Category:


Cyber




Responsibilities:

  • Conduct web application and code testing for all systems and applications, and open source dependencies, providing analysis and risk assessments for vulnerabilities discovered
  • Utilize code analysis and fuzzing tools that are furnished or approved by the Government to assess the quality and security of source code
  • Define secure coding standards and develop secure coding training for current and future developers
  • Conduct code reviews for all code changes for a given application release, providing both a detailed risk analysis of the security posture of the code and technical programming solutions (secure coding standards) to the developers to mitigate insecure code from being implemented
  • Knowledge of the latest security threats, techniques and exploits targeting vulnerabilities
  • Strong familiarity with multiple operating systems, databases, applications and platforms
  • Cyber-threat research, reporting and development/implementation of vulnerability mitigation strategies

Job Requirements


  • US citizenship with the ability to obtain a DoD Security Clearance

  • Bachelor's Degree and 3-5 years relevant experience. Degree can be substituted with added experience

  • Able to work collaboratively, coordinating among cross-functional teams and manage priorities

  • Excellent communication skills (oral and written) and analytical skills; strong and demonstrated interpersonal skills to include influence, negotiation, collaboration and diplomacy

  • Ability to coordinate and work with diverse groups of subject matter experts.

  • At least 1of the following active certifications: EC-Council Certified Secure Programmer, Certified Secure Software Lifecycle Professional (CSSLP), SANS Global Information Assurance Certification (GIAC) Secure Software Programmer (.NET or JAVA), HP ATP Fortify Security V1

  • Understanding of secure coding concepts and practices, skilled in writing and correcting coding mistakes for source code written in Java, Ruby, C#, JavaScript, and other languages

  • Proficiency in analyzing and testing web applications developed in at least a of the following languages: Java, JavaScript, Ruby, C#, Python

  • Knowledge of the latest security threats, techniques and exploits targeting vulnerabilities

  • Strong familiarity with multiple operating systems, databases, applications and platforms

  • Cyber-threat research, reporting and development/implementation of vulnerability mitigation strategies

  • Experience with network, web, and information security