{"schemaVersion":"jobsearcher.job.v1","id":"acd7cfc952e915d203a8fd18","url":"https://jobsearcher.com/jobs/acd7cfc952e915d203a8fd18","canonicalUrl":"https://jobsearcher.com/jobs/acd7cfc952e915d203a8fd18","title":"Software Security Engineer - DevSecOps, SME","description":"Would you like to perform rewarding work while contributing to the success of an established, growing company? Navstar is an award-winning organization that has a proven track record of successfully providing IT services and solutions both as a prime and sub-contractor on mission-focused IT programs. Our employees are integral players in support of mission-critical programs focused on our National Security.\n\nRole Description:\nNavstar is seeking an experienced, hands-on Software Security Engineer to design, develop, and implement secure software solutions supporting an enterprise AWS cloud migration and modernization initiative.\nThis is a working software engineering role requiring deep cybersecurity expertise and a strong emphasis on writing, testing, reviewing, and maintaining secure code. The selected candidate will translate cybersecurity policies, security requirements, and technical controls into functional software, automated security solutions, and secure development practices.\nThe ideal candidate combines SME-level software engineering capabilities with advanced cybersecurity knowledge. They must be equally comfortable developing production-quality software, identifying and remediating vulnerabilities, and engineering security directly into applications, cloud infrastructure, and deployment workflows.\nPosition Responsibilities\nWrite, test, review, and maintain secure, production-quality software aligned with enterprise cybersecurity policies and technical security requirements.\nDesign and develop software solutions that implement cybersecurity controls directly into applications, APIs, and cloud services.\nTranslate security policies, compliance requirements, and vulnerability findings into actionable, code-based solutions.\nDevelop secure applications and automation using Python, Java, Go, or comparable programming languages.\nIdentify, analyze, and remediate software vulnerabilities through secure coding, code reviews, and security testing.\nBuild and integrate automated security controls, vulnerability scanning, and policy enforcement into CI/CD pipelines.\nImplement secure authentication, authorization, encryption, secrets management, and identity and access controls.\nEngineer security solutions supporting AWS, Amazon EKS, Kubernetes, and containerized application environments.\nDevelop reusable security automation, Infrastructure as Code, and policy-as-code solutions.\nCollaborate with software developers, cloud architects, and DevOps engineers to embed cybersecurity requirements throughout the software development lifecycle.\nTroubleshoot complex security issues across application code, cloud infrastructure, containers, and deployment pipelines.\nServe as a technical SME for secure software development, application security architecture, and cybersecurity engineering while remaining directly responsible for implementation and delivery.\nRequired Skills and Qualifications:\nTo be eligible for this position you must hold an active TS/SCI.\nActive TS/SCI U.S. Security Clearance.\n10+ years of relevant experience in software engineering, application security, cybersecurity engineering, or DevSecOps.\nAssociate degree or higher in Computer Science, Software Engineering, Cybersecurity, IT, or a related technical field.\nExpert-level hands-on software development experience with Python, Java, Go, or comparable programming languages.\nDemonstrated experience designing, writing, testing, and maintaining secure production-quality software.\nDeep understanding of application security, secure coding practices, software vulnerabilities, and cybersecurity engineering principles.\nExperience translating cybersecurity requirements and security policies into functional code and automated technical controls.\nHands-on experience developing or securing applications within AWS cloud environments.\nPractical experience with Docker, Kubernetes, CI/CD pipelines, and Infrastructure as Code.\nExperience implementing application security testing, vulnerability remediation, and automated security enforcement.\nStrong understanding of authentication, authorization, encryption, identity management, API security, and secrets management.\nWorking knowledge of NIST security frameworks, OWASP, and secure software development standards.\nProven ability to independently diagnose security vulnerabilities and develop code-based solutions.\nAbility to work 100% onsite in Sterling, VA, with up to 25% CONUS travel.\n\nDesired Skills and Qualifications:\nExperience securing enterprise AWS cloud migrations and modernization initiatives.\nExperience with Amazon EKS, Terraform, Helm, and Kubernetes security.\nExperience implementing DevSecOps automation, SAST/DAST, dependency scanning, and policy-as-code.\nFamiliarity with NIST SP 800-53, NIST SSDF, FedRAMP, and zero-trust security principles.\nExperience developing security automation using AWS IAM, KMS, Secrets Manager, CloudTrail, and related services.\nExperience with software supply chain security, container security, and secure CI/CD architectures.\nExperience supporting platforms in restricted or disconnected environments.\nAWS, CSSLP, CISSP, or other relevant cybersecurity certifications.\nPrevious experience supporting IC or DoD programs and greenfield development efforts.\n\nPay Rate:\n\nIn compliance with Virginia's Equal Pay for Equal Work law, the annual base salary range for this position is $190,000 - $240,000. This range represents the base pay for this role and is provided in accordance with Maryland’s requirements to disclose compensation in job postings. Please note that actual compensation may vary based on factors such as (but not limited to) the scope and responsibilities of the role, the candidate’s qualifications, experience, education, skills, internal equity, and market conditions. In addition to base salary, candidates hired into this position may be eligible for a hiring bonus of $10,000.00, subject to applicable contingencies and Navstar policy.\n\nAbout Navstar\n\nFor 20 years Navstar has provided high-quality Innovative Technology Services and Solutions throughout the Intelligence Community. We would not have achieved the success we have without the best AllStar team; this is not just a place to work, Navstar is a community. At Navstar everything we do revolves around listening to both our customers and employees, delivering the results they expect, and being a trusted partner as both a prime and subcontractor. We have a proven track record of successfully providing innovative technology services and solutions on highly mission-focused programs; all while enjoying what we do at the same time. Security is our priority; together, we will make the nation a safer place.\n\nBenefits at Navstar\nHighly Competitive Health Care Premiums, including 100% employer paid for employee\nFlexible Spending Accounts for Medical and Dependent Care\nGenerous PTO and Federal Holiday Paid Leave\nEmployer Paid STD/LTD\nEmployer Paid Life Insurance\n401K plan and Employer Match\nReferral and Opportunity Referral Programs\nProfessional Development Assistance\n\nEOE/M/F/Vet/Disabled\n\nNavstar, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, age, religious beliefs, national origin, disability, U.S. veteran status, or any other legally protected characteristics under federal, state or local law.","company":"Navsta","rawCompany":"navsta","city":"Gaithersburg","state":"MD","isRemote":false,"isActive":false,"createdAt":"2026-11-04T11:01:05.869Z","occupations":[{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Software Security Engineer - DevSecOps, SME","description":"Would you like to perform rewarding work while contributing to the success of an established, growing company? Navstar is an award-winning organization that has a proven track record of successfully providing IT services and solutions both as a prime and sub-contractor on mission-focused IT programs. Our employees are integral players in support of mission-critical programs focused on our National Security.\n\nRole Description:\nNavstar is seeking an experienced, hands-on Software Security Engineer to design, develop, and implement secure software solutions supporting an enterprise AWS cloud migration and modernization initiative.\nThis is a working software engineering role requiring deep cybersecurity expertise and a strong emphasis on writing, testing, reviewing, and maintaining secure code. The selected candidate will translate cybersecurity policies, security requirements, and technical controls into functional software, automated security solutions, and secure development practices.\nThe ideal candidate combines SME-level software engineering capabilities with advanced cybersecurity knowledge. They must be equally comfortable developing production-quality software, identifying and remediating vulnerabilities, and engineering security directly into applications, cloud infrastructure, and deployment workflows.\nPosition Responsibilities\nWrite, test, review, and maintain secure, production-quality software aligned with enterprise cybersecurity policies and technical security requirements.\nDesign and develop software solutions that implement cybersecurity controls directly into applications, APIs, and cloud services.\nTranslate security policies, compliance requirements, and vulnerability findings into actionable, code-based solutions.\nDevelop secure applications and automation using Python, Java, Go, or comparable programming languages.\nIdentify, analyze, and remediate software vulnerabilities through secure coding, code reviews, and security testing.\nBuild and integrate automated security controls, vulnerability scanning, and policy enforcement into CI/CD pipelines.\nImplement secure authentication, authorization, encryption, secrets management, and identity and access controls.\nEngineer security solutions supporting AWS, Amazon EKS, Kubernetes, and containerized application environments.\nDevelop reusable security automation, Infrastructure as Code, and policy-as-code solutions.\nCollaborate with software developers, cloud architects, and DevOps engineers to embed cybersecurity requirements throughout the software development lifecycle.\nTroubleshoot complex security issues across application code, cloud infrastructure, containers, and deployment pipelines.\nServe as a technical SME for secure software development, application security architecture, and cybersecurity engineering while remaining directly responsible for implementation and delivery.\nRequired Skills and Qualifications:\nTo be eligible for this position you must hold an active TS/SCI.\nActive TS/SCI U.S. Security Clearance.\n10+ years of relevant experience in software engineering, application security, cybersecurity engineering, or DevSecOps.\nAssociate degree or higher in Computer Science, Software Engineering, Cybersecurity, IT, or a related technical field.\nExpert-level hands-on software development experience with Python, Java, Go, or comparable programming languages.\nDemonstrated experience designing, writing, testing, and maintaining secure production-quality software.\nDeep understanding of application security, secure coding practices, software vulnerabilities, and cybersecurity engineering principles.\nExperience translating cybersecurity requirements and security policies into functional code and automated technical controls.\nHands-on experience developing or securing applications within AWS cloud environments.\nPractical experience with Docker, Kubernetes, CI/CD pipelines, and Infrastructure as Code.\nExperience implementing application security testing, vulnerability remediation, and automated security enforcement.\nStrong understanding of authentication, authorization, encryption, identity management, API security, and secrets management.\nWorking knowledge of NIST security frameworks, OWASP, and secure software development standards.\nProven ability to independently diagnose security vulnerabilities and develop code-based solutions.\nAbility to work 100% onsite in Sterling, VA, with up to 25% CONUS travel.\n\nDesired Skills and Qualifications:\nExperience securing enterprise AWS cloud migrations and modernization initiatives.\nExperience with Amazon EKS, Terraform, Helm, and Kubernetes security.\nExperience implementing DevSecOps automation, SAST/DAST, dependency scanning, and policy-as-code.\nFamiliarity with NIST SP 800-53, NIST SSDF, FedRAMP, and zero-trust security principles.\nExperience developing security automation using AWS IAM, KMS, Secrets Manager, CloudTrail, and related services.\nExperience with software supply chain security, container security, and secure CI/CD architectures.\nExperience supporting platforms in restricted or disconnected environments.\nAWS, CSSLP, CISSP, or other relevant cybersecurity certifications.\nPrevious experience supporting IC or DoD programs and greenfield development efforts.\n\nPay Rate:\n\nIn compliance with Virginia's Equal Pay for Equal Work law, the annual base salary range for this position is $190,000 - $240,000. This range represents the base pay for this role and is provided in accordance with Maryland’s requirements to disclose compensation in job postings. Please note that actual compensation may vary based on factors such as (but not limited to) the scope and responsibilities of the role, the candidate’s qualifications, experience, education, skills, internal equity, and market conditions. In addition to base salary, candidates hired into this position may be eligible for a hiring bonus of $10,000.00, subject to applicable contingencies and Navstar policy.\n\nAbout Navstar\n\nFor 20 years Navstar has provided high-quality Innovative Technology Services and Solutions throughout the Intelligence Community. We would not have achieved the success we have without the best AllStar team; this is not just a place to work, Navstar is a community. At Navstar everything we do revolves around listening to both our customers and employees, delivering the results they expect, and being a trusted partner as both a prime and subcontractor. We have a proven track record of successfully providing innovative technology services and solutions on highly mission-focused programs; all while enjoying what we do at the same time. Security is our priority; together, we will make the nation a safer place.\n\nBenefits at Navstar\nHighly Competitive Health Care Premiums, including 100% employer paid for employee\nFlexible Spending Accounts for Medical and Dependent Care\nGenerous PTO and Federal Holiday Paid Leave\nEmployer Paid STD/LTD\nEmployer Paid Life Insurance\n401K plan and Employer Match\nReferral and Opportunity Referral Programs\nProfessional Development Assistance\n\nEOE/M/F/Vet/Disabled\n\nNavstar, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, age, religious beliefs, national origin, disability, U.S. veteran status, or any other legally protected characteristics under federal, state or local law.","datePosted":"2026-11-04T11:01:05.869Z","dateModified":"2026-11-04T11:01:05.869Z","hiringOrganization":{"@type":"Organization","name":"Navsta","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Gaithersburg","addressRegion":"MD","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"acd7cfc952e915d203a8fd18"},"url":"https://jobsearcher.com/jobs/acd7cfc952e915d203a8fd18"}}