{"schemaVersion":"jobsearcher.job.v1","id":"ffc6ec7b734753c146161e4b","url":"https://jobsearcher.com/jobs/ffc6ec7b734753c146161e4b","canonicalUrl":"https://jobsearcher.com/jobs/ffc6ec7b734753c146161e4b","title":"Software Engineer (JavaScript /TypeScript, Python)","description":"About the RoleThe company is seeking a Security Software Engineer to develop and strengthen software systems supporting Department of Defense (DoD) programs operating under CMMC, NIST 800-171, and FedRAMP compliance requirements. This role focuses on integrating security throughout the software development lifecycle (SDLC), from system design and code reviews to CI/CD pipelines and cloud deployment.The selected candidate will work closely with engineering, DevSecOps, and IT teams in a regulated, cloud-native environment using AWS Commercial, AWS GovCloud, and Azure GCC High. The position requires hands-on software engineering experience, strong application security knowledge, and the ability to implement security controls, manage vulnerabilities, and support compliance assessments.Key ResponsibilitiesDesign and develop secure software with security practices integrated into every phase of the software development lifecycle.Apply secure coding standards, threat modeling, and vulnerability mitigation practices aligned with NIST 800-53 and CMMC Level 2/3 controls.Conduct architecture reviews and strengthen code to address OWASP Top 10 vulnerabilities and DoD Security Technical Implementation Guides (STIGs).Automate security checks within CI/CD pipelines, including SAST, DAST, dependency scanning, and secrets detection.Design secure system and API architectures for multi-tenant cloud environments, including GCC High and FedRAMP-authorized platforms.Implement identity and access management (IAM) controls, just-in-time (JIT) provisioning, SSO, SAML, OIDC flows, and least-privilege authorization frameworks using technologies such as Cognito and Azure AD.Implement application security logging and monitoring to meet audit and continuous monitoring requirements across AU and SI control families.Lead code reviews, security scans, and targeted penetration testing, documenting findings against applicable security control frameworks.Identify, prioritize, and remediate vulnerabilities within POA&M timelines.Maintain supporting documentation and evidence for compliance assessments.Support application-layer incident response and contribute to after-action reports and corrective action plans.Act as an embedded security champion for engineering teams by providing mentorship and promoting secure code review practices.Develop and deliver security training materials and operational runbooks for engineering and DevOps teams.Collaborate with DevOps and SRE teams to enforce secure infrastructure as code (IaC), WAF rules, network controls, and runtime monitoring across AWS and Azure environments.Required QualificationsBachelor's degree in Computer Science, Engineering, or a related field, or equivalent experience.At least 3 years of software engineering experience with a strong focus on security.Proficiency in one or more programming languages, such as JavaScript/TypeScript, Python, Go, or C#.Experience with secure coding practices and frameworks.Strong understanding of application security principles, including OWASP Top 10, secure API/REST design, cryptography fundamentals, and authentication and authorization patterns.Experience with code scanning tools, including SAST and DAST, threat modeling, and penetration testing.Familiarity with NIST 800-171, CMMC, or FedRAMP security control requirements and evidence collection.Hands-on experience with AWS and/or Azure security services, including IAM, WAF, Security Hub, Defender, and Sentinel.Preferred QualificationsExperience with container security technologies such as Docker and ECS.Working knowledge of Zero Trust Architecture principles.Experience developing DevSecOps pipelines in regulated environments.Familiarity with security tools such as Prisma, Checkov, Snyk, or Aqua.Experience with GCC High or AWS GovCloud environments.Relevant certifications, including CISSP, CSSLP, CASP+, OSCP, CEH, GIAC (GWAPT, GSEC, GWEB), or CCP/CCA (UK Cyber Essentials equivalent).Experience securing microservices or event-driven architectures on ECS.Background working in federal or cleared environments.Work Location & ArrangementLocation: Hanover, Maryland, United States.Work Arrangement: On-site. The job description explicitly states that this is not a remote position.","company":"Torentify","rawCompany":"torentify","city":"Denver","state":"CO","isRemote":false,"isActive":false,"createdAt":"2026-11-06T07:51:03.741Z","occupations":[{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Software Engineer (JavaScript /TypeScript, Python)","description":"About the RoleThe company is seeking a Security Software Engineer to develop and strengthen software systems supporting Department of Defense (DoD) programs operating under CMMC, NIST 800-171, and FedRAMP compliance requirements. This role focuses on integrating security throughout the software development lifecycle (SDLC), from system design and code reviews to CI/CD pipelines and cloud deployment.The selected candidate will work closely with engineering, DevSecOps, and IT teams in a regulated, cloud-native environment using AWS Commercial, AWS GovCloud, and Azure GCC High. The position requires hands-on software engineering experience, strong application security knowledge, and the ability to implement security controls, manage vulnerabilities, and support compliance assessments.Key ResponsibilitiesDesign and develop secure software with security practices integrated into every phase of the software development lifecycle.Apply secure coding standards, threat modeling, and vulnerability mitigation practices aligned with NIST 800-53 and CMMC Level 2/3 controls.Conduct architecture reviews and strengthen code to address OWASP Top 10 vulnerabilities and DoD Security Technical Implementation Guides (STIGs).Automate security checks within CI/CD pipelines, including SAST, DAST, dependency scanning, and secrets detection.Design secure system and API architectures for multi-tenant cloud environments, including GCC High and FedRAMP-authorized platforms.Implement identity and access management (IAM) controls, just-in-time (JIT) provisioning, SSO, SAML, OIDC flows, and least-privilege authorization frameworks using technologies such as Cognito and Azure AD.Implement application security logging and monitoring to meet audit and continuous monitoring requirements across AU and SI control families.Lead code reviews, security scans, and targeted penetration testing, documenting findings against applicable security control frameworks.Identify, prioritize, and remediate vulnerabilities within POA&M timelines.Maintain supporting documentation and evidence for compliance assessments.Support application-layer incident response and contribute to after-action reports and corrective action plans.Act as an embedded security champion for engineering teams by providing mentorship and promoting secure code review practices.Develop and deliver security training materials and operational runbooks for engineering and DevOps teams.Collaborate with DevOps and SRE teams to enforce secure infrastructure as code (IaC), WAF rules, network controls, and runtime monitoring across AWS and Azure environments.Required QualificationsBachelor's degree in Computer Science, Engineering, or a related field, or equivalent experience.At least 3 years of software engineering experience with a strong focus on security.Proficiency in one or more programming languages, such as JavaScript/TypeScript, Python, Go, or C#.Experience with secure coding practices and frameworks.Strong understanding of application security principles, including OWASP Top 10, secure API/REST design, cryptography fundamentals, and authentication and authorization patterns.Experience with code scanning tools, including SAST and DAST, threat modeling, and penetration testing.Familiarity with NIST 800-171, CMMC, or FedRAMP security control requirements and evidence collection.Hands-on experience with AWS and/or Azure security services, including IAM, WAF, Security Hub, Defender, and Sentinel.Preferred QualificationsExperience with container security technologies such as Docker and ECS.Working knowledge of Zero Trust Architecture principles.Experience developing DevSecOps pipelines in regulated environments.Familiarity with security tools such as Prisma, Checkov, Snyk, or Aqua.Experience with GCC High or AWS GovCloud environments.Relevant certifications, including CISSP, CSSLP, CASP+, OSCP, CEH, GIAC (GWAPT, GSEC, GWEB), or CCP/CCA (UK Cyber Essentials equivalent).Experience securing microservices or event-driven architectures on ECS.Background working in federal or cleared environments.Work Location & ArrangementLocation: Hanover, Maryland, United States.Work Arrangement: On-site. The job description explicitly states that this is not a remote position.","datePosted":"2026-11-06T07:51:03.741Z","dateModified":"2026-11-06T07:51:03.741Z","hiringOrganization":{"@type":"Organization","name":"Torentify","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Denver","addressRegion":"CO","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"ffc6ec7b734753c146161e4b"},"url":"https://jobsearcher.com/jobs/ffc6ec7b734753c146161e4b"}}