18 hours

Software QA Engineer / Fortify Specialist

Semmes, AL 36575

Lead G6 Software Assurance function and posture other SWA resources for unified mission alignment.
Provide recommendations, guidance, understand and implement best practices, develop SOPs/policies.
Review Fortify FPRs to concur/non-concur with developer analysis of SCA findings. The review process may require complex code analysis. Most review activities are performed against ASP.NET Webforms and MVC web applications. Applicant must be proficient in these technologies.
Test and research new scan findings reported by Fortify SCA to determine severity and potential fixes.
Develop and standardize remediation approaches for design patterns used across the portfolio of hosted applications.
Interface with Fortify support.
- Write simplified test cases that reproduce problematic behavior.
- Submit support tickets and track status through to resolution.
Track and download new releases of Fortify SCA and Fortify Rule packs.
Distribute Fortify software and support installation and configuration activities as needed.
Track software utilization against licensed capacity.
Work integration of scan services into DevOps processes as needed.
Participate in the implement and administration of Software Security Center.
Coordinate with organizations cybersecurity elements on scan reviews and other software assurance activities that arise.
Evaluate additional analysis tooling to expand capabilities as opportunities arise.
Participate in process enhancement and capability growth of software assurance activities within the organization.


Requires 5 to 8 years with BS/BA.

Applicant must have experience with web-oriented development as well as the identification and remediation common code security issues that occur in web-oriented code.
Experience performing code reviews with an emphasis on code security.
Experience using industry-standard static and dynamic code-security-analysis tooling is required. Experience working with Fortify tooling including Fortify SCA, Audit Workbench, Software Security Center, and IDE plugins is preferred.
Experience with working within software development processes within a DOD environment.

Secret Clearance, Security +

Required: Static code security analysis tooling, C#, ASP.NET Webforms and MVC, CSS/JS/HTML, SQL

Desired: Fortify SCA, Fortify Audit Workbench, Fortify Software Security Center, Apache Tomcat, Windows Server administration, Multi-tier architecture, Agile development, jQuery, Bootstrap 3/4, Jira or ServiceNow, Familiarity with Cloud, GOV Cloud, AWS, Azure, Azure DevOps Server, GitLab, SonarQube, Burp Suite, Fortify WebInspect, DISA Application Development STIG, Dynamic Code Analysis

Salary Minimum: $62,753.60 Salary Maximum:$134,160.00 The estimate displayed represents the typical salary range for this position, and is just one component of Perspecta's total compensation package for employees. Other rewards may include annual bonuses, short- and long-term incentives, and program-specific awards. In addition, Perspecta provides a variety of benefits to employees.
About Peraton

Peraton drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the worlds leading mission capability integrator and transformative enterprise IT provider, we deliver trusted and highly differentiated national security solutions and technologies that keep people safe and secure. Peraton serves as a valued partner to essential government agencies across the intelligence, space, cyber, defense, civilian, health, and state and local markets. Every day, our 22,000 employees do the cant be done, solving the most daunting challenges facing our customers.

We are an Equal Opportunity/Affirmative Action Employer. We consider applicants without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, or membership in any other group protected by federal, state, or local law.

As a government contractor, Peraton abides by the following provision

Pay Transparency Nondiscrimination Provision

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of the other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractors legal duty to furnish information. 41 CFR 60-1.35(c).


  • Information Technology
Posted: 2021-05-11 Expires: 2021-06-09

With offerings in mission services, digital transformation and enterprise operations, our team of 14,000 engineers, analysts, investigators and architects work tirelessly to create innovative solutions. We have the expertise and experience not only to devise solutions, but to execute on them successfully.

Sponsored by:
ADP Logo
Sponsored by:
Bank of America Logo

Featured Jobs[ View All ]

Featured Employers

Before you go...

Our free job seeker tools include alerts for new jobs, saving your favorites, optimized job matching, and more! Just enter your email below.

Share this job:

Software QA Engineer / Fortify Specialist

Semmes, AL 36575

Join us to start saving your Favorite Jobs!

Sign In Create Account
Powered ByCareerCast