- Company Name
- MBDA
- Job Title
- Software Security Engineer
- Job Description
-
**Job Title:** Software Security Engineer
**Role Summary:**
Lead the integration of security practices into the development lifecycle of defense‑grade software products. Apply threat modeling, vulnerability analysis, and secure coding standards to protect critical systems against sophisticated cyber threats. Collaborate with cross‑functional engineering teams to ensure security requirements are met throughout design, implementation, testing, and deployment.
**Expectations:**
- Deliver robust, secure software solutions that meet defense industry compliance standards.
- Maintain and improve the organization’s Secure Development Lifecycle (SDL).
- Provide expert guidance on security risk mitigation to development teams.
- Achieve required security clearance and uphold confidentiality of classified information.
**Key Responsibilities:**
- Conduct threat modeling and security architecture reviews for new and existing products.
- Perform static and dynamic code analysis, penetration testing, and vulnerability assessments.
- Lead secure code reviews and mentor engineers on secure coding practices.
- Define, implement, and monitor security controls, cryptographic mechanisms, and authentication/authorization schemes.
- Integrate security tooling (SAST, DAST, dependency scanning) into CI/CD pipelines.
- Develop and maintain security documentation, guidelines, and compliance evidence (e.g., NATO, ISO 27001, IEC 62443).
- Respond to security incidents, perform root‑cause analysis, and drive remediation.
- Stay current with emerging threats, vulnerabilities, and defense‑specific security standards.
**Required Skills:**
- Strong experience in secure software development (C/C++, Java, Python, or similar).
- Proficiency with security testing tools (e.g., Fortify, SonarQube, Burp Suite, OWASP ZAP).
- Deep understanding of cryptography, authentication, and secure communication protocols.
- Hands‑on experience with threat modeling methodologies (STRIDE, PASTA).
- Familiarity with DevSecOps practices and CI/CD platforms (Jenkins, GitLab, Azure DevOps).
- Knowledge of defense‑industry security standards and regulations.
- Excellent analytical, problem‑solving, and communication skills.
**Required Education & Certifications:**
- Bachelor’s degree in Computer Science, Information Security, Software Engineering, or related field (or equivalent experience).
- Security clearance appropriate for handling classified defense information (e.g., SC, DV).
- Preferred certifications: CISSP, CEH, GSEC, OSCP, or equivalent.