Open-Source Software Security SME

Location: Arlington, Virginia, United States; hybrid

Salary: $185,000–$235,000 per year

Company

hirify.global provides technical services and cybersecurity support, including work with the Cybersecurity and Infrastructure Security Agency.

What you will do

• Support CISA Secure by Design initiatives and collaborate with open-source organizations, maintainers, and vendors.
• Use AI-assisted tools to identify, analyze, and validate open-source software vulnerabilities and recommend remediation.
• Assess vulnerabilities and identify opportunities for software hardening and modernization.
• Provide technical guidance on dependency management, SBOMs, and software supply chain risks.
• Translate CISA guidance into tools and software contributions suitable for active open-source projects.
• Contribute code, testing, and documentation to an open-source coding agent and collaborate with vulnerability management, threat hunting, AI, product, and platform engineering teams.

Requirements

• US citizenship and ability to obtain and maintain DHS Suitability (EOD).
• Bachelor’s degree in computer science, cybersecurity, software engineering, or a related technical field.
• At least 8 years of professional experience in software development, cybersecurity, or related technical roles.
• At least 8 years of hands-on experience in open-source software security, application security, or vulnerability research.
• Experience developing, testing, and contributing code to production software systems and open-source projects.
• Knowledge of secure development practices, dependency management, SBOMs, software supply chain security, and AI-assisted development or security tools.

Nice to have

• 10+ years of professional experience in software security, including at least 7 years in open-source security.
• Experience supporting CISA, DHS, or other federal cybersecurity agencies or programs.
• Experience with critical infrastructure protection, national cybersecurity initiatives, technical leadership, or architecture.
• Familiarity with Secure by Design initiatives, an Open-Source Program Office, or open-source coding agents.

Culture & Benefits

• Hybrid work environment in Arlington, Virginia.
• Collaboration with technical teams and the open-source community.
• Opportunity to participate in technical pilots and open-source community engagements.
• Benefits are provided as part of the employment package.