1 day ago
Arlington, VA, USA +2 moreSenior
Base Salary
$131k - $180k/yr
Responsibilities
- Perform application security analysis using SAST, SCA, DAST, automated tools, and code reviews.
- Conduct secure design reviews and help developers integrate security controls into system and application designs.
- Integrate and maintain automated security tooling and security gates in CI/CD workflows with DevOps engineers.
- Audit security scan tools and workflow security gate configurations for compliance with enterprise standards and improve tooling workflows.
- Advise on AI-augmented application security and other emerging AppSec capabilities.
- Partner with development teams as a security expert to promote secure innovation and a culture of security.
- Oversee IT security systems, manage incident responses, conduct risk assessments, and develop advanced security controls.
- Support, troubleshoot, and administer networks, operating systems, applications, Microsoft platforms, domain structures, authentication, and digital signatures.
- Research, recommend, and integrate security tools and technologies.
Requirements
- Bachelor's degree in cybersecurity, network engineering, information technology, or a related engineering field; relevant experience may substitute, requiring at least nine years of related experience without a degree.
- At least 5 years of experience in a related role, including at least 3 years focused on application security or DevOps/DevSecOps.
- Strong knowledge of cybersecurity principles, secure software design, the system development lifecycle, secure coding, DevSecOps, data security administration, and application security risk assessment.
- Hands-on experience configuring security tools in CI/CD workflows, analyzing source code and tool outputs, evaluating exploitability and risk, and triaging findings.
- Working knowledge of NIST SP 800-171, NIST SP 800-218, and OWASP standards.
- Experience with security monitoring and assessment tools, networks, operating systems, applications, and Microsoft platforms.
- Ability to obtain and maintain a Secret U.S. Security Clearance; U.S. citizenship is required.
- Preferred experience with SonarQube, Semgrep, Trivy, JFrog Xray, JFrog Artifactory, GitHub Actions, Terraform, Ansible, Policy as Code, Infrastructure as Code, Kubernetes, Docker, API management, and AI system security.
- Proficiency in one or more of C++, Python, or JavaScript is preferred.
Benefits
- Medical, dental, and vision plans.
- 401(k) with a 150% match up to 6%.
- Life insurance, three weeks of paid time off, tuition reimbursement, and additional benefits.
- Office or hybrid work environment; travel may be required.
- Secret U.S. Security Clearance and U.S. citizenship are required for employment.
Tech Stack
Categories
About SNC
Sierra Nevada Corporation (SNC) is a privately held aerospace and defense contractor that designs and integrates space systems, ISR/aviation platforms, and C4ISR mission solutions for U.S. and allied government customers. Founded in 1963 and headquartered in Sparks, Nevada, it is owned by Eren and Fatih Ozmen and has delivered systems for NASA (including the Dream Chaser spaceplane via Sierra Space) and the U.S. Department of Defense across aircraft modifications, electronic warfare, and communications.