Qualification

Strong knowledge of IAMProven ability to assess riskWORK ENVIRONMENTFast-pacedOccasional travel to government sites

Required

Active security clearance or ability to obtain and maintain security clearance
10+ years of experience in technical roles, including securing production cloud environments at scale, with strong understanding of cloud security models, attack patterns, and defensive strategies across Azure and AWS
Strong software development skills in Python (preferred) and/or Go with experience building security tooling and automation
Strong software engineering fundamentals: comfortable with data structures, algorithms, API design, debugging production systems, and working across multiple languages
Strong Terraform skills including module design and infrastructure-as-code security best practices
Experience building security tooling or automation used by engineering teams
Strong experience with cloud networking and troubleshooting across AWS and Azure: VPCs/VNets, subnets, NACLs/NSGs, Security Groups, Transit Gateways/Virtual WAN, VPC peering, route tables, and VPN/ExpressConnect—you can debug "why can't X talk to Y" across multi-account/multi-subscription network topologies
Hands-on experience with cloud security tools (CSPM, CWPP, SIEM) and infrastructure-as-code security (Terraform, CloudFormation)
Strong knowledge of IAM, encryption, logging/monitoring, and cloud-native security patterns
DevSecOps mindset with experience embedding security into development and operations workflows
Proven ability to assess risk, prioritize work, and execute complex security projects
Track record of solving complex technical problems

Preferred

Strong PKI knowledge with hands-on experience working with certificate infrastructure—including certificate lifecycle management, mTLS implementation, certificate-based authentication, and X.509/TLS troubleshooting
Hands-on experience operating HashiCorp Vault in production—including Vault PKI, dynamic secrets engines, and authentication methods. Experience integrating Vault with Kubernetes, AWS, and Azure auth methods is a plus
WORK ENVIRONMENT
Fast-paced, mission-critical environment supporting national security space operations
Requires coordination across distributed teams including spacecraft engineers, ground operations, software developers, and government partners
May require participation in on-call rotation for security incident response and mission-critical system support
Occasional travel to government sites, launch facilities, or partner locations may be required

Staff Application Security Engineer at Trueanomalyinc · LumiJobs

Staff Application Security Engineer

Responsibilities

Qualification

Required

Preferred

Benefits

Company

Trueanomalyinc

More roles at Trueanomalyinc