Application Security Engineer III
Core
Implementing and auditing security controls for mission-critical space systems and satellite mission control software to meet DoD security standards and government compliance.
Role type
Senior IC application security engineer
Builds
Security architecture documentation, operational security guides, and secure application controls for space systems
Domain
Aerospace/Defense + Application Security
Required skills
Application security engineering, Vulnerability management, Secure code review (Elixir, Python, C++, JavaScript), SAST/DAST tooling, Cloud security (Azure/AWS/GCP), Threat modeling, Authentication/Authorization patterns, Cryptography, Defense-in-depth/Zero Trust
Preferred skills
TS/SCI clearance, NIST 800-171/800-53 implementation, DoD Impact Levels/STIGs, Elixir/Erlang/Phoenix, Azure Government Cloud, DevSecOps/CI-CD security, Kubernetes security, Incident response engineering
Technologies
CodeQL, Semgrep, JFrog Xray, Terraform, Bicep, Pulumi, Kubernetes, GitOps
Responsibilities
Create security architecture documentation and operational security guides for government authorization processes, Drive vulnerability management program with defined SLAs for remediation, Perform security code reviews for Elixir, Python, C++, and JavaScript codebases, Collaborate in the triage and management of security automations using SAST, SCA, and DAST tools, Collaborate with engineering teams to address security findings and implement secure coding practices, Develop and deliver security training to software engineers and systems administrators
Seniority
Senior, hands-on IC
