Muon seeks a Staff Software Security Engineer to develop secure software for hardware systems, particularly within U.S. Government and ITAR-controlled environments.
Requirements
- Proven experience in software development security, including secure SDLC practices, threat modeling, and vulnerability assessment.
- Demonstrable experience writing, testing, and debugging software for hardware platforms.
- Experience with software version control systems (e.g., Git), continuous integration/continuous deployment (CI/CD) pipelines, and automated testing frameworks.
- In-depth knowledge and hands-on experience with International Traffic in Arms Regulations (ITAR).
- Experience with U.S. Government contracts and familiarity with government standards and procurement processes
- Experience with specific industry standards relevant to government or aerospace/defense projects (NIST 800-series).
- Familiarity with encryption technologies and secure data handling practices.
Responsibilities
- Implement and champion secure coding practices and software development security methodologies throughout the development lifecycle.
- Implement and enforce secure coding practices (e.g., SAST, DAST, threat modeling) throughout the software development lifecycle.
- Conduct threat modeling, vulnerability analysis, and security code reviews to identify and mitigate potential security risks in software and systems.
- Develop and maintain comprehensive software documentation, including design specifications, test plans, verification procedures, and reports necessary for U.S. Government contracts and ITAR compliance.
- Support the integration, testing, and deployment of software solutions in laboratory and operational environments.
- Collaborate closely with software engineers to define software requirements, ensure seamless hardware/software integration, and troubleshoot complex system-level issues.
- Review and advise on the development of software for ITAR-controlled payloads, ensuring strict adherence to all applicable export control laws and company policies.
Other
- Minimum of 10 years of professional experience in software development.
- Excellent written and verbal communication skills, with the ability to document technical details clearly and concisely.
- Strong analytical and problem-solving skills with the ability to troubleshoot complex software and hardware integration issues.
- Must be a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158
- Must be eligible to access the export controlled information without a required export authorization, or eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency.