Software Assurance & Security Compliance

The contract seeks a subcontractor to perform comprehensive software assurance and security compliance activities aligned with Department of Defense standards, including execution of static and dynamic code analysis, verification of secure coding practices, and adherence to Security Technical Implementation Guides and the Risk Management Framework. Work must ensure systems meet rigorous DoD security requirements throughout the software development lifecycle, with a focus on identifying vulnerabilities, enforcing compliance, and mitigating risks in mission-critical applications. Performance is to be conducted primarily at the Dahlgren, Virginia location with a zip code of 22448, under the oversight of NSA Dahlgren. The solicitation, posted on July 28, 2026, requires responses by August 12, 2026, and falls under NAICS code 541512 for computer systems design services. This is a subcontract opportunity with no set-aside designation specified, targeting qualified entities capable of delivering high-assurance software solutions to defense systems. The contract emphasizes technical expertise in automated analysis tools, knowledge of DoD security protocols, and the ability to document and remediate non-compliant code in a regulated environment. While no point of contact is listed, all submissions must be made through the official SAM.gov portal linked in the posting.