Skip to content

Open nowPosted 53 minutes agoWe saw it 19 min after it went up

Cybersecurity Engineer – Application/Software Security (TS/SCI)

Data Systems Analysts, Inc.23 open roles

Pay
$140,000 – $170,000 a year
Where
Charlottesville, VA
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowCybersecurity Engineer – Application/Software Security (TS/SCI)Data Systems Analysts, Inc. · Charlottesville, VA
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Data Systems Analysts, Inc.'s own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.9% of postings close within 7 days. Measured by our own scanner across the market. Data Systems Analysts, Inc. postings stay open a median of 50 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.9%7 days
  4. 22.4%14 days
  5. 38.1%30 days
  6. 59.0%60 days
This job: posted 53 minutes ago

Data Systems Analysts, Inc. median: 50 days open

The posting

All hired employees are expected to have experience with Microsoft Copilot and / or an approved equivalent AI solution.

Description

Data Systems Analysts, Inc. (DSA) is seeking a TS/SCI-cleared Cybersecurity Engineer (Application Security) to secure the software that supports mission-critical systems in a secure DoD environment. The selected candidate will own software security within the cyber engineering team, testing applications, reviewing code, validating vulnerabilities, and making sure the right security tools and processes are in place.

The Cybersecurity Engineer will work closely with engineers, architects, ISSOs, and ISSMs to translate security requirements into practical technical solutions and confirm that security tools are sufficient. This role suits professionals with a software development background who moved into application security, penetration testing, or offensive cyber.

This position is onsite at the National Ground Intelligence Center (NGIC) in Charlottesville, VA. Candidates willing to relocate to the Charlottesville area are encouraged to apply.

Responsibilities:

  • Own software security within the cyber engineering team, providing technical guidance on securing applications, APIs, and back-end services.
  • Perform security testing of applications and validate that fixes resolve identified findings.
  • Review source code against secure coding standards to identify vulnerabilities, insecure design, and exploitable weaknesses.
  • Implement, tune, and maintain software security tools (SAST, DAST, dependency and container scanning) and integrate them into development and release processes.
  • Evaluate open-source and commercial cyber tools and source code to determine fit, security risk, and what can be adapted to meet mission requirements.
  • Partner with engineers, system admins, architects, ISSOs, and ISSMs to define security requirements and confirm tools and controls are sufficient.
  • Assess risk from major software changes, unpatched components, and software reaching end of support.
  • Apply adversary techniques (such as MITRE ATT&CK) and threat modeling to prioritize findings by real-world impact.
  • Document independent test results, release risk, and technical evidence supporting RMF and ATO activities.
  • Communicate software risks, findings, and practical fixes to technical teams, system owners, and leadership.

Required Education, Certifications and Security Clearance

  • BS degree in Computer Science, Software Engineering, Computer Information Systems, Cybersecurity, or related field Experience may be substituted for degree.
  • TS/SCI Clearance
  • CompTIA Security+ (DoD 8140 compliant)

Requirements Experience/Qualifications:

  • Minimum 5 years of combined experience in software development, application security, penetration testing, or secure software assessment.
  • Hands-on software development experience in at least one language such as Python, Java, C#, Go, or JavaScript, with an understanding of back-end services, APIs, and databases.
  • Demonstrated experience finding and validating software vulnerabilities through code review, security testing, or technical assessment.
  • Working knowledge of common application weaknesses (OWASP Top 10, CWE), how they are exploited, and how to fix them.
  • Ability to assess exploitability and impact, and communicate clear, practical fixes to engineers and compliance staff.
  • Ability to work independently as the primary software security resource on a cybersecurity team.

Preferred Experience/Qualifications:

  • GWAPT, OSCP, OSWE, CSSLP, PenTest+, CySA+, SecurityX/CASP+, CEH, CISSP, or other relevant certification.
  • Experience with SAST/DAST tools such as Fortify, SonarQube, Checkmarx, Burp Suite, or OWASP ZAP.
  • Penetration testing, red team, or web application testing experience.
  • Experience integrating security checks into CI/CD pipelines (GitLab, Jenkins).
  • Experience with SQL and relational databases (Oracle, PostgreSQL) and ETL workflows.
  • Familiarity with containers, AWS/GovCloud, software supply chain security, or SBOMs.
  • Familiarity with RMF, NIST SP 800-53, eMASS, and the DISA Application Security and Development STIG.
  • Experience supporting DoD, U.S. Army, or Intelligence Community missions.

#DSA209

#LI-MH1

The posted salary range is a good-faith estimate. Actual compensation will be based on the selected candidate’s qualifications, experience, skills, and other job-related factors.

DSA - Salary Pay Range

$140,000—$170,000 USD

Many of DSA's positions require the ability to obtain a security clearance. Security clearances may only be granted to U.S. citizens. In addition, applicants who accept a conditional offer of employment may be subject to government security investigation(s) and must meet eligibility requirements for access to classified information. DSA is proud to be an Equal Opportunity Employer. DSA is committed to treating all employees and applicants for employment with respect and dignity and maintaining a workplace that is free from unlawful discrimination. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status. DSA requires background checks , where permitted , by law. DSA is an E-Verify Employer.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Data Systems Analysts, Inc.'s own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Data Systems Analysts, Inc.'s form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Data Systems Analysts, Inc.'s answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.