Skip to content

Open nowPosted yesterday

Software Developer SME (Artifact Management & Secure Development Specialist) – TS/SCI

Xcelerate Solutions136 open roles

Where
Quantico, VA, United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSoftware Developer SME (Artifact Management & Secure Development Specialist) – TS/SCIXcelerate Solutions · Quantico, VA, United States
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Xcelerate Solutions's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.9% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 12.9%7 days
  4. 21.0%14 days
  5. 35.6%30 days
  6. 58.5%60 days
This job: posted yesterday

The posting

Software Engineer SME (Artifact Management & Secure Development Specialist) – TS/SCI

Xcelerate Solutions is seeking an Artifact Management and Secure Software Development Specialist SME Software Engineer for this effort will be responsible for providing guidance and targeted assistance in migrating NCIS Mission Applications to a secure software development toolchain and ensuring compliance with DON-CIO policies regarding secure software development practices and products.

Location:

Quantico, VA. Hybrid remote schedule. Must be local and able to meet onsite 1-2 times per week or as required.

Clearance:

TS/SCI

Key Responsibilities:

  • Design, develop, implement, and maintain secure, scalable, full-stack software applications supporting mission-critical enterprise systems, with a focus on Secure Development Operations (SecDevOps) principles.
  • Develop and maintain software applications using compiled and interpreted programming languages while ensuring compliance with secure coding standards and enterprise security requirements.
  • Design, develop, and optimize relational and NoSQL database solutions to support application functionality, performance, data integrity, and security.
  • Establish, implement, and enforce secure coding standards, including code quality, Zero Trust security principles, Software Bill of Materials (SBOM), and secure dependency management.
  • Configure, administer, and maintain software artifact management repositories using Nexus, JFrog Artifactory, NuGet, or comparable technologies to ensure secure storage, version control, and distribution of software components.
  • Implement and maintain Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and code quality tools, including SonarQube, Aikido, CodeQL, or equivalent platforms, based on their supported capabilities.
  • Integrate automated security scanning, code quality assessments, vulnerability detection, and dependency analysis into CI/CD pipelines to strengthen application security throughout the software development lifecycle.
  • Establish and enforce Git-based source control practices, including pre-commit hooks, branch protection policies, pull request reviews, and automated code validation.
  • Implement secure software supply chain practices to ensure software dependencies, third-party libraries, and application artifacts meet organizational security and compliance requirements.
  • Identify, assess, prioritize, and remediate software vulnerabilities, insecure dependencies, and code quality issues to reduce security risks across enterprise applications.
  • Collaborate with DevSecOps engineers, cybersecurity personnel, infrastructure teams, and Mission Application developers to implement consistent security controls and secure development practices.
  • Provide technical guidance and mentorship to Mission Application developers on secure coding methodologies, application security, vulnerability remediation, and compliance requirements.
  • Apply software engineering and security principles across diverse programming languages, operating systems, development frameworks, and hosting environments.
  • Evaluate and implement emerging technologies, security tools, and development methodologies to address evolving mission requirements and improve software engineering capabilities.
  • Support security assessments, accreditation activities, and compliance reviews by maintaining software security documentation, SBOM records, vulnerability reports, and evidence of implemented security controls.
  • Develop and maintain secure software development procedures, technical documentation, coding standards, and best practices to support consistent implementation across the enterprise.
  • Promote a culture of security awareness, accountability, and continuous compliance by establishing repeatable processes and encouraging sustained adoption of secure software development standards.

Minimum Requirements:

  • High School with 10+ years (or commensurate experience)
  • Clearance Required: Top Secret/SCI
  • Expertise in Secure Software Development (SecDevOps focus) across a full-stack domain, including database (relational and NoSQL) and application development (compiled and interpreted languages)
  • Expertise in secure coding practices (including code quality, Zero Trust, SBOM, and secure dependency management)
  • Expertise with artifact management toolsets (Nexus, Artifactory, NuGet, etc) and SAST/DAST code quality platforms (SonarQube, Aikido, CodeQL, or similar) and Git-oriented supporting capabilities (such as pre-commit hooks and branch management rules)
  • Must be comfortable applying software engineering principles to disparate languages, operating systems, and hosting environments holistically, learning new technologies as needed to support emergent mission needs, and providing guidance to Mission Application developers to build a culture of compliance regarding sustained implementation of such objectives. Shares overlap/redundancy with other two SME software developer positions.
  • IAT II Certification

About Xcelerate Solutions: Founded in 2009 and headquartered in McLean, VA, Xcelerate Solutions (www.xceleratesolutions.com) is one of America's fastest-growing companies. Xcelerate’s culture is defined by our diversified workforce of dynamic and versatile professionals, supported with growth and development opportunities that contribute to individual and company growth. This strong commitment to our employees has been recognized by our inclusion on the Washington Business Journal’s “50 Best Places to Work” list as well as being a “Great Place to Work” certified company with a 4.6 star, and a 99% CEO approval Glassdoor rating. Come find out why Xcelerate Solutions is one of the top DC Metro employers!

Xcelerate Solutions is an Equal Employment Opportunity/Affirmative Action Employer. We evaluate qualified applicants without regard to race, color, national origin, religion, age, equal pay, disability, veteran status, sex, sexual orientation, gender identity, genetic information, or expression of another protected characteristic. As part of this commitment to the full inclusion of all qualified individuals, Xcelerate provides reasonable accommodations if needed because of an applicant's or an employee's disability.

Pay Transparency Notice: Xcelerate Solutions will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Xcelerate Solutions's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Xcelerate Solutions's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Xcelerate Solutions's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.