Software Developer at Enterprise Solutions & Management in Virginia Beach, VA, USA

Job description

• Enterprise Solutions and Management (ESM) is a rapidly growing government contractor that provides strategic IT services that meet mission needs for Defense and Federal customers. We are hiring a Software Developer to support an enterprise-level program within a federal environment.

Responsibilities

• Responsible for developing, testing, and sustaining cybersecurity tools used to analyze protocol and service vulnerabilities, build proof-of-concept exploits, and tailor Command and Control (C2) capabilities in representative environments. Performed software development across the full lifecycle-including requirements gathering, design, coding, testing, deployment, and maintenance-using Agile and DevSecOps methodologies while leveraging version control systems, code analysis tools, and debugging techniques. Implemented STIGs, worked extensively with communication protocols such as DNS, HTTP/S, WebSockets, and SMB, and developed software and automation using languages including Python, C/C++, C#, Go, Rust, and Assembly. Utilized containerization technologies such as Docker and software virtual environments (e.g., PyEnv) to support secure, scalable, and repeatable development and testing workflows while ensuring compliance with established tool development lifecycle requirements.

Requirements

• Demonstrated experience with the full software development lifecycle (SDLC), including requirements gathering, design, development, testing, deployment, sustainment, and maintenance using Agile, DevSecOps, or similar methodologies.
• Proficiency in developing, testing, debugging, and analyzing software using modern programming languages (e.g., C#, C, C++, Python, Go, Rust, Assembly), code analysis tools, version control systems, containerization technologies (e.g., Docker), and virtual development environments (e.g., PyEnv).
• Experience developing and tailoring proof-of-concept exploits, leveraging Command and Control (C2) frameworks, analyzing protocol and service vulnerabilities, and implementing exploitation frameworks in representative test environments.
• Strong understanding of networking and security concepts, including communication protocols (e.g., DNS, HTTP/S, WebSockets, SMB), STIG implementation, and vulnerability assessment methodologies.
• Experience developing, validating, and sustaining cybersecurity tools that meet defined development lifecycle requirements, including testing, framework integration, and operational support.
• Ten (10) years of full-time experience in Software Development (may substitute 8 years with a Master's degree)
• IAT-III requires one of the following current certifications: CISSP, CCSP
• Bachelor's Degree in Cybersecurity or related discipline
• Top Secret
• Be a positive, self-motivated, and proactive person with the ability to adapt to change and tolerate stressful situations
• Candidate must communicate effectively with team members, team lead, management, and government customer
• Must have the ability and desire to research and develop creative solutions to unique problems with minimal supervision

Skills

Required

• Software development lifecycle (SDLC)
• Agile, DevSecOps
• Code analysis tools
• Version control systems
• Containerization (Docker)
• Virtual development environments (PyEnv)
• Exploit development
• Command and Control (C2) frameworks
• Networking and security concepts
• STIG implementation
• Vulnerability assessment
• Cybersecurity tool development

Preferred

• Positive, self-motivated, proactive
• Adapt to change
• Tolerate stressful situations