Software Security Engineer- Cloud/GovCloud (Top Secret cleared)

Mission-critical software security in a remote, government-focused environment. This role supports a government customer by integrating security throughout the software development lifecycle, helping protect applications and cloud-based systems using proven security practices and tooling. The position is remote and contingent upon a contract award, and requires an active Top Secret clearance.

What you’ll do

• Monitor and assess application and system security to identify vulnerabilities and potential threats early.
• Conduct secure code reviews and use SAST/DAST and SCA to strengthen application security and align with secure coding standards.
• Test and evaluate security tools, applications, and system configurations to validate compliance with federal and DoD security requirements.
• Investigate and remediate vulnerabilities, recommending and implementing corrective actions to reduce risk.
• Design and implement security controls, tools, and automation across cloud and on-premise environments.
• Provide guidance and training to development teams on secure coding practices and DevSecOps principles.
• Develop and maintain technical documentation for security architecture, risk findings, and mitigation strategies.
• Prepare and deliver executive-level briefings, status reports, and performance updates to government stakeholders and corporate leadership.
• Maintain a positive, results-oriented work environment by building partnerships with internal and external partners.

What you bring

• Active Top Secret clearance.
• 2+ years of experience in application security, secure software development, or cybersecurity engineering.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related technical field.
• 2 years working on or around AWS cloud platforms.
• Hands-on experience performing secure code reviews and vulnerability assessments using industry-standard tools such as SAST, DAST, and SCA.
• Experience implementing security controls in cloud environments, including AWS GovCloud or similar secure federal cloud environments.
• Strong understanding of secure coding standards, including OWASP, NIST, and DoD STIGs.
• Experience supporting systems within regulated or high-security environments.
• Ability to self-organize, prioritize, and conduct research across multiple projects under tight deadlines in a fast-paced environment.
• Clear communication and writing skills in English.
• Strong analytical, problem-solving, and decision-making capabilities.
• Excellent communication and interpersonal skills to interface effectively at all levels.

Tools and technologies

AWS, AWS GovCloud, SAST, DAST, SCA, OWASP, NIST, DoD STIGs

Remote work details

• Location: Reston, VA (remote).
• ICF monitors employee work locations and blocks access from foreign locations/foreign IP addresses and prohibits personal VPN connections.
• Travel may be required once a quarter to an office or client site.
• Core work hours are 8am–5pm Eastern Time, with flexibility to start earlier or work later based on your time zone.

Role note: This position is contingent upon a contract award. Interviews are underway and offers may be extended in anticipation of the award.

Application requirement: This application must be submitted directly by the applicant for consideration. Submitting on someone else’s behalf may result in exclusion from consideration.

Accommodation: Applicants needing an accommodation for disability or religious purposes related to the application process should contact [email protected].

Candidate AI usage policy: Using AI tools to generate or assist with responses during interviews is not permitted. If an accommodation is needed that involves the use of AI, contact [email protected] in advance.

Pay range

$81,499.00 - $138,549.00 per year (full-time). Nationwide Remote Office (US99).