ICF
Software Security Engineer - Cloud/GovCloud (Top Secret cleared)
RemoteUnited States only· UTC-8…UTC-5
- Role
- Security
- Experience
- Mid
- Employment
- Full-time
- Company size
- Enterprise
$81.5k–$138.5k/yr
Check eligibility
Open to US only · UTC-8…UTC-5. Set where you work from to check your eligibility.
No BS summary
Software security engineer for remote US work supporting government cloud systems. Must have active Top Secret clearance and 2+ years in application security, secure software development, or cybersecurity engineering. AWS/GovCloud, SAST/DAST/SCA, OWASP/NIST/DoD STIGs are preferred.
Optional skills
AWSSASTDASTSCAAWS GovCloudOWASPNISTDoD STIGs
Required languages
English clear written communication
<div><p></p><p>Please note: This role is contingent upon a contract award. While it is not an immediate opening, we are actively conducting interviews and extending offers in anticipation of the award. </p><p></p><p><b>The Work: </b> ICF is seeking an experienced and driven Software Security Engineer to lead and oversee mission-critical initiatives in support of our government customer. In this role, you will help safeguard applications and cloud-based systems by integrating security best practices throughout the software development lifecycle. </p><p></p><p><b>Job Location: </b> This position is remote. If you accept this position, you should note that ICF does monitor employee work locations and blocks access from foreign locations/foreign IP addresses and also prohibits personal VPN connections. </p><p></p><p>You may be asked to travel once a quarter to an office or client site. </p><p>Our core work hours are 8am - 5pm Eastern Time with the option to start earlier or work later depending on your time zone. </p><p></p><p><b>What You Will Do: </b></p><ul><li><p>Proactively monitor and assess application and system security to identify vulnerabilities and potential threats. </p></li><li><p>Perform secure code reviews and static/dynamic analysis to strengthen application security and ensure adherence to secure coding standards. </p></li><li><p>Test and evaluate security tools, applications, and system configurations to validate compliance with federal and DoD security requirements. </p></li><li><p>Investigate and remediate potential security vulnerabilities, recommending and implementing corrective actions to reduce risk. </p></li><li><p>Design and implement security controls, tools, and automation to enhance protection across cloud and on-premise environments. </p></li><li><p>Provide guidance and training to development teams on secure coding practices and DevSecOps principles. </p></li><li><p>Develop and maintain technical documentation related to security architecture, risk findings, and mitigation strategies. </p></li><li><p>Prepare and deliver executive-level briefings, status reports, and performance updates to government stakeholders and corporate leadership. </p></li><li><p>Maintain a positive, results-oriented work environment by building partnerships with internal and external partners. </p></li></ul><p></p><p><b>What You Will Bring With You: </b></p><ul><li><p>Active Top Secret clearance. </p></li><li><p>Proven experience (2+ years) in application security, secure software development, or cybersecurity engineering.</p></li></ul><p></p><p><b>What We Would Like You To Bring With You: </b></p><p></p><ul><li><p>Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related technical field. </p></li><li><p>2 years’ experience with working on/around cloud platforms in AWS. </p></li><li><p>Hands-on experience performing secure code reviews and vulnerability assessments using industry-standard tools (e.g., SAST, DAST, SCA). </p></li><li><p>Experience implementing security controls in cloud environments (e.g., AWS GovCloud or similar secure federal cloud environments). </p></li><li><p>Strong understanding of secure coding standards (e.g., OWASP, NIST, DoD STIGs). </p></li><li><p>Experience supporting systems within regulated or high-security environments. </p></li><li><p>Ability to self-organize, priorities and conduct research on multiple projects under tight deadlines in a fast-paced environment. </p></li><li><p>An ability to communicate and write clearly in English. </p></li></ul><p><b> </b></p><p><b>Professional Skills: </b></p><ul><li><p>Highly effective analytical, problem-solving, and decision-making capabilities. </p></li><li><p>Excellent communication and interpersonal skills to interface effectively at all levels of the business. </p></li></ul><p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:left"><u><b>Working at ICF</b></u></p>ICF is a global advisory and technology services provider, but we’re not your typical consultants. We combine unmatched expertise with cutting-edge technology to help clients solve their most complex challenges, navigate change, and shape the future.<p style="text-align:inherit"></p><p style="text-align:inherit"></p><div><p><span><span>We can only solve the world's toughest challenges by building a workplace that allows everyone to thrive. We are an equal opportunity employer</span><span>.</span><span><span> </span></span><span>Together, our employees are empowered to share their<span> </span></span><span>expertise</span><span><span> </span>and collaborate with others to achieve personal and professional goals. For more information, please read our </span></span><u><span>EEO</span></u><span><span><span> </span>policy.</span></span></p><p></p><p><span>We will consider for employment qualified applicants with arrest and conviction records.</span></p><p><span> </span></p><p><span><span>Reasonable Accommodations are available, including, but not limited to, for disabled veterans, individuals with disabilities, and individuals with<span> </span></span><span>sincerely held</span><span><span> </span>religious beliefs, in all phases of the application and employment process. To request<span> </span></span><span>an accommodation,</span><span><span> </span>please email </span></span><u><span><span><span><span><span><span><span><span><span><span>Candidateaccommodation@icf.com</span></span></span></span></span></span></span></span></span></span></u><span><span> and we will be happy to<span> </span></span><span>assist</span><span>. All information you provide will be kept confidential and will be used only to the extent<span> </span></span><span><span> </span>to provide needed reasonable accommodations. </span></span><span> </span></p></div><div><p></p></div><div><p><span><span>Read more about </span></span><u><span>workplace discrimination righ</span><span>t</span><span>s</span></u><span><span><span> </span>or our benefit offerings which are included in the </span></span><u><span>Transparency in (Benefits) Coverage</span><span><span> </span></span><span>Act.</span></u><span> </span></p></div><p></p><p style="text-align:inherit"> </p><p style="text-align:inherit"></p><div><b><u>Candidate AI Usage Policy</u></b></div><div><div><p style="text-align:left"><span><span>At ICF, we are committed to ensuring a fair interview process for all candidates based on their own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) tools to generate or<span> </span></span><span>assist</span><span><span> </span>with responses during interviews (whether in-person or virtual) is not<span> </span></span><span>permitted</span><span>. This policy is in place to<span> </span></span><span>maintain</span><span><span> </span>the integrity and authenticity of the interview process. </span></span><span> </span></p><p style="text-align:inherit"></p></div><div><p style="text-align:left"><span><span>However, we understand that some candidates may require accommodation</span><span><span> that involves the use of AI. </span>If<span> </span></span><span>such an</span><span><span> </span>accommodation is needed, candidates are instructed to contact us in advance at </span></span><u><span><span><span><span><span><span><span><span><span><span><span><span><span><span><span><span><span><span><span><span class="WIO0">candidateaccommodation@icf.com</span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></u><span><span>. We<span> </span></span><span>are dedicated to providing</span><span><span> </span>the necessary support to ensure that all candidates have an equal opportunity to succeed.</span></span> <span><span> </span></span></p></div></div><p style="text-align:inherit"><br/> </p><p style="text-align:left"><b>Pay Range</b><span> - There are multiple factors that are considered in determining final </span><span>pay</span><span> for a position, including, but not limited to, relevant work experience, skills, certifications and competencies that align to the specified role, geographic location, education and certifications as well as contract provisions regarding labor categories that are specific to the position. </span></p><p style="text-align:inherit"></p><p style="text-align:left"><span>The pay range for this position </span><span>based on full-time employment </span><span>is</span>:</p>$81,499.00 - $138,549.00<p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p>Nationwide Remote Office (US99)</div>
What you'll do
- Monitor and assess application and system security to identify vulnerabilities and threats.
- Perform secure code reviews and static/dynamic analysis to strengthen application security.
- Test and evaluate security tools, applications, and system configurations for federal and DoD compliance.
- Investigate and remediate security vulnerabilities and implement corrective actions.
- Design and implement security controls, tools, and automation across cloud and on-premise environments.
- Guide and train development teams on secure coding practices and DevSecOps principles.
- Develop and maintain technical documentation on security architecture, risk findings, and mitigation strategies.
- Prepare executive-level briefings, status reports, and performance updates for government stakeholders and leadership.
- Build partnerships with internal and external partners.
What they require
- Active Top Secret clearance.
- 2+ years of experience in application security, secure software development, or cybersecurity engineering.
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related technical field preferred.
- 2 years’ experience working on or around cloud platforms in AWS preferred.
- Hands-on experience performing secure code reviews and vulnerability assessments using industry-standard tools preferred.
- Experience implementing security controls in cloud environments such as AWS GovCloud or similar secure federal cloud environments preferred.
- Strong understanding of secure coding standards such as OWASP, NIST, and DoD STIGs preferred.
- Experience supporting systems within regulated or high-security environments preferred.
- Ability to self-organize, prioritize, and conduct research on multiple projects under tight deadlines.
- Ability to communicate and write clearly in English.
- Strong analytical, problem-solving, and decision-making capabilities.
- Excellent communication and interpersonal skills.
Benefits
- Equal opportunity employer.
- Reasonable accommodations available.
- Benefit offerings included in Transparency in Coverage information.
ICF is a global advisory and technology services provider that combines expertise with technology to help clients solve complex challenges, navigate change, and shape the future.
Details
Apply routeUnknown
$81.5k–$138.5k/yr