Senior Application Security Engineer
True Anomaly1 day ago
Denver, CO, USASenior
Base Salary
$170k - $255k/yr
Responsibilities
- Create security architecture documentation and operational security guides for government authorization processes.
- Drive vulnerability management with severity-based remediation SLAs of 30, 90, and 180 days.
- Perform security code reviews across Elixir, Python, C++, and JavaScript codebases.
- Triage and manage SAST, SCA, and DAST security automation tools.
- Partner with engineering teams to resolve security findings and implement secure coding practices.
- Develop and deliver security training for software engineers and systems administrators.
- Create and manage application security incident response playbooks.
- Evaluate and integrate third-party security solutions.
Requirements
- 5+ years of experience in application security, product security, or security engineering.
- Hands-on experience implementing controls for NIST 800-171, NIST 800-53, FedRAMP, or CMMC frameworks.
- Ability to write production-quality code in at least one language such as Python, Rust, Elixir, or C++.
- Experience with cloud security, preferably Azure, with AWS or GCP also accepted.
- Understanding of threat modeling, risk assessment, OAuth2, JWT, RBAC, ABAC, cryptography, key management, defense-in-depth, and Zero Trust principles.
- Eligibility for a DoD Secret or TS/SCI clearance; active TS/SCI clearance is preferred.
- Preferred experience includes NIST 800-171 Rev 3 or NIST 800-53 implementation, DoD Impact Levels, STIGs, Elixir/Erlang/Phoenix, functional programming, Azure Government Cloud, Ghommit, DevSecOps, platform security, GitOps, infrastructure-as-code security, Kubernetes security, detection engineering, SOAR integration, and regulated industries.
Benefits
- 100% company-paid medical, dental, and vision coverage for employees and dependents, with HSA/HRA options.
- Flexible Time Off for exempt employees or up to 25 accrued PTO days for non-exempt employees, plus 12 paid holidays, parental leave, and sick leave.
- Daily catered lunch and unlimited snacks for in-office employees.
- 401(k), fitness reimbursement, Dog Fridays, and equity participation.
- The role is primarily on-site near Denver or Long Beach, and significant work must be performed on site.
Tech Stack
AWSAzureC++ElixirErlangF#Google Cloud PlatformHaskellJavaScriptKubernetesPhoenixPythonRustScalaTerraform
Categories
About True Anomaly
True Anomaly builds spacecraft and software for space defense, including autonomous satellites, precision-sensing payloads, mission command-and-control software, and space-based interceptors for national security and commercial operators. Founded in 2022 by former U.S. Space Force members, it is privately held and headquartered in Englewood, Colorado. The company sells hardware, AI-enabled flight software, and mission operations services to U.S. and allied defense programs and space infrastructure providers.