Senior Application Security Engineer

Denver, COfull timeOn Site

Apply on Employer Site

senior

$180k–$255k

H1B: no

Trueanomalyinc Senior Application Security Engineer responsible for implementing and auditing security controls for mission-critical space systems. Focus on compliance with government standards and collaboration with engineering teams.

Responsibilities

If you thrive in a fast-paced environment where you can build security controls from the ground up and see the direct impact of your work on national security space operations, this mission is for you.
This position requires the ability to obtain and maintain a security clearance.
Create security architecture documentation and operational security guides for government authorization processes
Drive vulnerability management program with defined SLAs for remediation (30/90/180 days by severity)
Perform security code reviews for Elixir, Python, C++, and JavaScript codebases
Collaborate in the triage and management of security automations using SAST (CodeQL, Semgrep), SCA (JFrog Xray), and DAST tools
Collaborate with engineering teams to address security findings and implement secure coding practices
Develop and deliver security training to software engineers and systems administrators across the organization
Create and manage incident response playbooks specific to application security events
Evaluate and integrate third-party security solutions to enhance overall security capabilities

Qualification

Threat modeling and risk assessmentCryptography and key managementExperience using Ghommit toolGitOps workflows and CI/CD security

Required

5+ years of experience in application security, product security, or security engineering
Hands-on experience implementing security controls for compliance frameworks such as NIST 800-171, NIST 800-53, FedRAMP, or CMMC
Strong software engineering skills with ability to write production-quality code in at least one language (Python, Rust, Elixir, C++, or similar)
Experience with cloud security (Azure preferred, AWS or GCP acceptable)
Solid understanding of secure architecture principles including:
Threat modeling and risk assessment
Authentication and authorization patterns (OAuth2, JWT, RBAC, ABAC)
Cryptography and key management
Defense-in-depth and Zero Trust principles
Proven ability to work collaboratively with engineering teams to implement security controls without blocking velocity
Eligible for DoD Secret or TS/SCI clearance

Preferred

Active TS/SCI clearance or ability to obtain and maintain a security clearance
Direct experience with NIST 800-171 Rev 3 or NIST 800-53 implementation projects (gap analysis, control implementation, evidence collection)
Experience with Department of Defense Impact Levels (IL2/IL4/IL5/IL6) or STIGs (Secure Technical Implementation Guides)
Familiarity with Elixir/Erlang/Phoenix or other functional programming ecosystems (Scala, Haskell, F#, OCaml)
Experience with Azure Government Cloud or other FedRAMP-authorized cloud environments
Experience using Ghommit tool
Background in DevSecOps or Platform Security Engineering:
GitOps workflows and CI/CD security

Benefits

Dental
Vision
401(k)
PTO
Equity/RSU
Parental Leave

Company

Trueanomalyinc

View company page

Source: greenhouse

Active within the past hour

More roles at Trueanomalyinc

Program Scheduler

Denver, CO

Epsilon3 Administrator

Denver, CO

Electrical Engineer (Senior/Staff), CD&H

Denver, CO

Staff Enterprise Risk Analyst

Denver, CO

Boost Your Interview Chances

Improve Resume Match Score

Free

Your Score

9.0

Strong Applicant

Must-Have Skills for This Role

ElixirPythonC++JavaScriptSASTCodeQL

Optimize my Resume

Apply Faster with Autofill

Free

Save your profile once. LumiJobs pre-fills the employer's application form so you stop re-typing the same answers on every site.

Apply With Autofill

Or skip LumiJobs's tools and submit directly on the employer's career site.

Apply on Employer Site

Senior Application Security Engineer at Trueanomalyinc · LumiJobs