Mission-critical software security in a remote, government-focused environment. This role supports a government customer by integrating security throughout the software development lifecycle, helping protect applications and cloud-based systems using proven security practices and tooling. The position is remote and contingent upon a contract award, and requires an active Top Secret clearance.
What you’ll do
- Monitor and assess application and system security to identify vulnerabilities and potential threats early.
- Conduct secure code reviews and use SAST/DAST and SCA to strengthen application security and align with secure coding standards.
- Test and evaluate security tools, applications, and system configurations to validate compliance with federal and DoD security requirements.
- Investigate and remediate vulnerabilities, recommending and implementing corrective actions to reduce risk.
- Design and implement security controls, tools, and automation across cloud and on-premise environments.
- Provide guidance and training to development teams on secure coding practices and DevSecOps principles.
- Develop and maintain technical documentation for security architecture, risk findings, and mitigation strategies.
- Prepare and deliver executive-level briefings, status reports, and performance updates to government stakeholders and corporate leadership.
- Maintain a positive, results-oriented work environment by building partnerships with internal and external partners.
What you bring
- Active Top Secret clearance.
- 2+ years of experience in application security, secure software development, or cybersecurity engineering.
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related technical field.
- 2 years working on or around AWS cloud platforms.
- Hands-on experience performing secure code reviews and vulnerability assessments using industry-standard tools such as SAST, DAST, and SCA.
- Experience implementing security controls in cloud environments, including AWS GovCloud or similar secure federal cloud environments.
- Strong understanding of secure coding standards, including OWASP, NIST, and DoD STIGs.
- Experience supporting systems within regulated or high-security environments.
- Ability to self-organize, prioritize, and conduct research across multiple projects under tight deadlines in a fast-paced environment.
- Clear communication and writing skills in English.
- Strong analytical, problem-solving, and decision-making capabilities.
- Excellent communication and interpersonal skills to interface effectively at all levels.
Tools and technologies
AWS, AWS GovCloud, SAST, DAST, SCA, OWASP, NIST, DoD STIGs
Remote work details
- Location: Reston, VA (remote).
- ICF monitors employee work locations and blocks access from foreign locations/foreign IP addresses and prohibits personal VPN connections.
- Travel may be required once a quarter to an office or client site.
- Core work hours are 8am–5pm Eastern Time, with flexibility to start earlier or work later based on your time zone.
Role note: This position is contingent upon a contract award. Interviews are underway and offers may be extended in anticipation of the award.
Application requirement: This application must be submitted directly by the applicant for consideration. Submitting on someone else’s behalf may result in exclusion from consideration.
Accommodation: Applicants needing an accommodation for disability or religious purposes related to the application process should contact Candidateaccommodation@icf.com.
Candidate AI usage policy: Using AI tools to generate or assist with responses during interviews is not permitted. If an accommodation is needed that involves the use of AI, contact candidateaccommodation@icf.com in advance.
Pay range
$81,499.00 - $138,549.00 per year (full-time). Nationwide Remote Office (US99).
