Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I am programmer by day and night, I work within security at the moment working on some security products. I have noticed a few non software engineering based roles which require security clearance. I was wondering is there any cases within software engineering / programming that developers require security clearance ?

If the answer is yes where would one get this type of accreditation ? and what are some useful resources on this subject ?

share|improve this question
4  
If you work on a classified project, you will need a security clearance. You, as an individual, cannot get a clearance. You have to be sponsored by a company, and then only if you will be working on a classified project. It is expensive for a company to get you a clearance, and it often takes 9 months or more, so it can be hard to get one. –  Ron Trunk Feb 24 '14 at 10:21
    
So if I was going to work on a project would an employer typically state that you need to be able to gain clearance ? I say company A got my security clearance could it be transferred to company B ? –  OliverBS Feb 24 '14 at 10:23
1  
This varies country to country, so while Ron's guidance is broadly correct in the US, in the UK it is typically much less time to gain clearance (for some levels). In some countries the sponsor may be government. –  Rory Alsop Feb 24 '14 at 10:43
    
Often employers require that you be "eligible" for a clearance. And yes, they can be transferred. –  Ron Trunk Feb 24 '14 at 10:44
    
Yes, I should mention that I'm speaking from a US perspective. –  Ron Trunk Feb 24 '14 at 10:44

1 Answer 1

Yes, there certainly are circumstances that require programmers to hold security clearances. The most common is when working for directly for the federal government at any of a number of agencies including the Department of Defense, Department of State, FBI, NSA, and a number of others. In the private sector, you'll most commonly see clearance requirements for jobs working with defense contractors, though it could feasibly be a component of a job for any government contractor.

In order to obtain a security clearance, there must be a necessity. It's not like a certification that you can get just to make yourself more employable...It must be obtained in concert with a project or position that requires you to be handle classified information. Classified information could mean anything from the contents of sensitive communications, to plans, to specifications of weapon systems, even down to the implementation details of software that serves a sensitive purpose. Clearances also don't last forever. Not only is periodic re-certification required, but if you leave the position that requires you to hold a clearance, it will eventually expire, assuming you don't take another position that also requires clearance, of course.

Clearance is not something you can pursue as an individual. It must be justified by the agency or company that you work for, based on the fact that they already have programs or contracts in place that require them (and therefore you) to deal with classified information as I described above.

For additional information on security clearances in the U.S. (the country for which this answer applies) the State Department website has details.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.