VariQ has an exciting opportunity for a highly qualified Code Reviewerto support the Defense Information Systems Agency (DISA) in Ft. Meade, MD.
Available upon award, currently in proposal/bid stage
Location: Ft. Meade and Contractor site
Security Clearance: TS/SCI
Salary: dependent upon experience
Shall have at least 5 years of specialized experience in the field of code reviewing
Shall have an Information Assurance Manager (IAM) Level II certification in accordance with DoD 8570.01-M (CAP, CASP, CISM, CISSP).
Shall be able to use vulnerabilities scanner such as web inspect or code review tools such as HP Fortify, Sonar, etc.
Shall conduct code reviews on each capability release in accordance with Application Security Development (ASD) and other applicable STIGs using the government-provided code review process.
Able to identify security vulnerabilities and areas of non-compliance based on DoD Policy, Security Technical Implementation Guides (STIGS), and Security Requirement Guides (SRGs).
Experienced in providing collected and analyzed data output of the cybersecurity tools in the open vulnerabilities spreadsheet report and the daily code review report, while providing all code review results to the Government.