Security Software Developer

Security Software Developer Vidoori is a digital transformation leader recognized for delivering excellence in cloud and software solutions. As we expand our security engineering capabilities, we are seeking an experienced Security Software Developer to join our team. This role offers the opportunity to design, build and maintain secure software components and developer-focused security tooling, and to collaborate across engineering, product and security teams within an inclusive environment that values continuous learning and practical innovation. Role Overview – Security Software Developer Reporting to senior technical leadership, the Security Software Developer will design and implement security features, libraries and automation that integrate into our software delivery lifecycle. The role combines hands‑on secure coding with collaboration across application, platform and security teams to reduce risk, improve runtime protection and embed security earlier in development. You will work closely with developers, platform engineers and security colleagues to deliver production-ready, secure software and to continuously improve tooling, processes and developer experience. Key Responsibilities – Secure Development and Tooling Design, implement and maintain security libraries, SDKs and application-level protections that are secure by design and easy for engineers to adopt. Develop and integrate security automation and developer tooling into CI/CD pipelines to support shift-left security, automated scanning and feedback loops. Build runtime defence capabilities such as input validation, secure authentication/authorisation flows, secrets handling, and secure configuration management. Author and maintain static and dynamic analysis integrations, custom rules or detectors, and remediation guidance to reduce vulnerability introduction and speed up fixes. Collaborate with application teams to threat-model, define security controls and ensure secure implementation of features across the development lifecycle. Contribute to secure CI/CD patterns, signing and verification of artifacts, and supply-chain protections to improve provenance and integrity of releases. Implement logging, telemetry and alerting for security-related events and provide actionable context to support incident detection and response. Participate in vulnerability triage, root cause analysis and coordinated remediation; contribute to post-incident reviews and preventative measures. Produce clear developer-focused documentation, secure coding guidelines and runbooks to improve team capability and promote consistent practices. Engage in threat research and proof-of-concept work to evaluate new defensive techniques, open-source tools and runtime protections. Essential Skills and Experience – Secure Software Engineering Bachelor’s degree in Computer Science, Engineering or a related discipline, or equivalent practical experience. Proven experience (typically 3–7 years) in software development with a focus on security, secure design or security engineering within cloud-native environments. Strong programming skills in one or more languages commonly used for backend and tooling (e.g., Python, Go, Java, C#) and experience producing well-tested, maintainable code. Experience integrating security tooling (SAST, DAST, SCA, dependency scanning) into CI/CD pipelines and developing custom checks or rules. Solid understanding of authentication and authorisation standards (OAuth2, OpenID Connect, JWT), secrets management, cryptography basics and secure session handling. Familiarity with container and orchestration environments (Docker, Kubernetes) and practical experience implementing runtime security controls and image hardening. Experience with cloud platforms (AWS, Azure or GCP) and applying platform security best practices (IAM, network controls, KMS, secrets stores). Good knowledge of secure development lifecycle concepts, threat modelling, and common vulnerability classes (OWASP Top Ten, SANS CWE). Excellent communication skills with the ability to explain security concepts to developers and stakeholders and to produce clear technical documentation. Desirable Skills – Advanced Security Practices Professional security certifications (CISSP, CSSLP, OSCP, CEH or cloud provider security certs) are advantageous. Experience with policy-as-code and enforcement (OPA, Gatekeeper), runtime protection (WAF, RASP, eBPF-based tooling) or service mesh security patterns. Familiarity with secure software supply chain practices, artifact signing, SBOMs and reproducible builds. Practical experience contributing to open-source security projects or developing community-facing security tools. Background in incident response, forensic analysis or red/blue team exercises and knowledge of common detection strategies. Benefits and Career Development – Technical Growth at Vidoori Competitive base salary with performance-related bonus and incentives linked to technical and delivery outcomes. Flexible working arrangements, including hybrid options to support a healthy work–life balance. Supportive and inclusive culture with investment in professional development, training, and mentorship opportunities. Opportunity to influence security strategy, adopt emerging defensive technologies and progress into senior technical or security leadership roles. Work on high-impact security and software engineering engagements across public sector and commercial clients. Application Guidance – Technical Opportunities at Vidoori Location: Hybrid (DMV Area) Employment Type: Full-time, mid to senior-level Eligibility: U.S. Citizenship Required Join Vidoori as a Security Software Developer and help us build secure, resilient and developer-friendly software. If you are pragmatic, collaborative and passionate about embedding security into the software delivery lifecycle, we encourage you to apply and contribute to a team dedicated to technical quality and inclusive growth. Remote status Hybrid Our Culture Corporate culture is essential to allow the organization to differentiate itself. In terms of image on the one hand, it has strengths both internally and externally to consumers. It is indeed a source of cohesion and motivation of employees and it limits conflicts. With customers, it conveys a positive image and can develop a feeling of closeness to the company or even become a criterion of choice. About Vidoori Vidoori, Inc. is a consulting firm that provides Program Management, Information Technology and Engineering services for government and commercial clients. Our team’s experience and on-going support span numerous government agencies, such as the Census Bureau, Centers for Medicare & Medicaid Services, Department of Defense (Army branch), Department of Homeland Security, Social Security Administration, and Department of Veterans Affairs. Vidoori takes the experiences we gain to continuously improve upon existing and future efforts, while producing innovative solutions to complex problems. We are committed to providing our partners with a low cost, low risk, and high quality driven small business partner for their mission critical needs. Founded in 2008 Co-workers 100