Senior Application Security Engineer
Core
Designing and implementing application-level security controls, audit logging, and incident response for mission-critical satellite mission control software and flight systems.
Role type
Senior Application Security Engineer
Builds
Security controls, compliance documentation, and secure software for U.S. space superiority missions
Domain
Aerospace/Defense, Application Security, Cloud Security
Required skills
Application security engineering, Vulnerability management, Secure code review (Elixir, Python, C++, JavaScript), SAST/DAST tooling, Compliance frameworks (NIST 800-171/800-53), Cloud security (Azure/AWS/GCP), Threat modeling, Cryptography, Zero Trust principles
Preferred skills
TS/SCI clearance, NIST 800-171 Rev 3 implementation, DoD Impact Levels/STIGs, Elixir/Erlang/Phoenix, Azure Government Cloud, DevSecOps/CI-CD security, Kubernetes security, Incident response engineering
Technologies
CodeQL, Semgrep, JFrog Xray, Terraform, Bicep, Pulumi, Kubernetes, GitOps
Responsibilities
Create security architecture documentation and operational guides for government authorization, Drive vulnerability management program with defined SLAs, Perform security code reviews, Collaborate in triage and management of security automations, Develop and deliver security training, Create and manage incident response playbooks
Seniority
Senior, hands-on IC
