Application Security Engineer III
True Anomaly3 days ago
Denver, CO, USASenior
Base Salary
$140k - $205k/yr
Responsibilities
- Create security architecture documentation and operational security guides for government authorization processes.
- Drive vulnerability management with severity-based remediation SLAs.
- Perform security code reviews across Elixir, Python, C++, and JavaScript codebases.
- Triage and manage SAST, SCA, and DAST security automation tools.
- Collaborate with engineering teams to remediate security findings and implement secure coding practices.
- Develop and deliver security training for software engineers and systems administrators.
- Create and manage application security incident response playbooks.
- Evaluate and integrate third-party security solutions.
Requirements
- At least 3 years of experience in application security, product security, or security engineering.
- Hands-on experience implementing controls for NIST 800-171, NIST 800-53, FedRAMP, or CMMC.
- Ability to write production-quality code in at least one language such as Python, Rust, Elixir, or C++.
- Experience with cloud security, preferably Azure, or AWS or GCP.
- Understanding of threat modeling, risk assessment, OAuth2, JWT, RBAC, ABAC, cryptography, key management, defense in depth, and Zero Trust.
- Ability to collaborate with engineering teams to implement security controls without blocking velocity.
- Eligibility for a DoD Secret or TS/SCI clearance.
- Preferred qualifications include active TS/SCI clearance, NIST 800-171 Rev 3 or NIST 800-53 implementation experience, DoD Impact Levels, STIGs, functional programming, Azure Government Cloud, FedRAMP-authorized environments, Ghommit, DevSecOps, platform security, GitOps, CI/CD security, infrastructure-as-code security, Kubernetes security, incident response, detection engineering, SOAR, regulated-industry experience, and startup experience.
Benefits
- 100% company-paid medical, dental, and vision coverage for employees and dependents, with HSA/HRA options.
- Flexible Time Off for exempt employees or accrued PTO of up to 25 days for non-exempt employees, plus 12 paid holidays, parental leave, and sick leave.
- Daily catered lunch and unlimited snacks for in-office employees.
- 401(k), fitness reimbursement, Dog Fridays, and equity participation.
- The role is primarily onsite near Denver or Long Beach, with significant work performed onsite.
Tech Stack
AWSAzureC++ElixirErlangF#Google Cloud PlatformHaskellJavaScriptKubernetesPhoenixPythonRustScalaTerraform
Categories
About True Anomaly
True Anomaly builds spacecraft and software for space defense, including autonomous satellites, precision-sensing payloads, mission command-and-control software, and space-based interceptors for national security and commercial operators. Founded in 2022 by former U.S. Space Force members, it is privately held and headquartered in Englewood, Colorado. The company sells hardware, AI-enabled flight software, and mission operations services to U.S. and allied defense programs and space infrastructure providers.