Senior Security Developer (Full Stack)
Job Description
Description:C. Mack Solutions is looking for a senior software developer/architect with a passion for government technology solutions to lead the implementation of security solutions across all layers of our infrastructure, though primarily in the application layer, and in the interactions between systems. The ideal candidate will relish the opportunity to tackle hard problems and find solutions within the environmental constraints that exist. They will also be able to serve as a technical lead, working independently and in coordination with other team members to communicate complex technical concepts and guide cross-functional teams through the development lifecycle. This is a great opportunity to work on mission-critical systems that bring clear value to our customers and end users on a daily basis.What You'll Be Doing:Engineer and deploy comprehensive security measures throughout the software lifecycle, from development to production, ensuring adherence to secure coding standards and safeguarding dataEstablish and maintain security architecture and policies specifically designed for AWS-based microservices environmentsScale security solutions across diverse development teams and applications with varying architectural designsAnalyze code scan outputs from tools like Anchore, WebInspect, and DBProtect, and collaborate with compliance teams to fine-tune and enhance scanning effectivenessChampion early-stage security integration by building and embedding tools that enforce security checkpoints within CI/CD workflowsIntegrate security checks into source control and pipelines to deliver prompt feedback and uncover insecure coding patterns early in the development processPerform vulnerability scans and penetration tests to detect and address security weaknesses proactivelyApply ethical hacking techniques to uncover and remediate security flaws in both applications and infrastructurePromote secure development practices in Java, Python, and Angular by offering internal training and hands-on support for secure coding, deployment, and operationsDeploy real-time security monitoring and alerting systems to swiftly identify and respond to potential threatsRequirements:U.S. Citizenship is required. Candidate must be able to obtain CBP Public Trust clearance.Bachelor's degree and over 10 years of hands-on experience in software development using Java, Python, and AngularRecent experience building applications in Java with Spring Boot frameworkProven expertise in implementing security protocols such as TLS/SSL, IPsec, OAuth, OpenID Connect, SAML, HTTPS, and encryption/key managementSolid grasp of Zero Trust security concepts and practical approaches to implementationExtensive experience working with AWS services and security tools, including IAM, VPC, CloudTrail, and AWS Security featuresStrong background in microservices and container technologies, including Docker and KubernetesTrack record of integrating security checks and controls into CI/CD pipelinesKnowledgeable in network security, database systems, and hardware-level protectionsExceptional analytical and troubleshooting abilities, with a keen eye for detailEffective communicator able to explain complex security topics to both technical and non-technical audiencesExperienced in leading projects and mentoring team members to support growth and collaborationCollaborative mindset with the ability to work closely with developers, ISSOs, security engineers, architects, and other stakeholders involved in solution deliveryPreferred Skills and Experience:Skilled in using ethical hacking tools and techniques to identify and address security vulnerabilitiesHolds relevant certifications such as Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), or AWS Certified Security – SpecialtyExperienced in contributing to large-scale initiatives involving multiple development and operations teamsFamiliar with working on federal government projects, including navigating compliance and regulatory requirements