Senior Application Security Engineer

True Anomaly • Denver, CO

216d • $155,000 - $245,000

About The Position

A new space race has begun. True Anomaly seeks those with the talent and ambition to build innovative technology that solves the next generation of engineering, manufacturing, and operational challenges for space security and sustainability. As a Senior Application Security Engineer, you will play a critical role in ensuring the security and compliance of our software products with FedRAMP High, NIST controls, and future Department of Defense IL5+ requirements. You will leverage your expertise to enhance our security posture and support our mission of maintaining secure and sustainable operations in space.

Requirements

• 5+ years of experience in product or application security.
• Proficiency in exploiting common attack patterns and exploitation techniques on web applications, coupled with strong knowledge of threat modeling, OWASP Top 10, and secure architecture reviews.
• Hands-on experience with web application security testing tools such as Burp Suite, open-source scanners, and/or vendor products.
• Solid understanding or experience working in containerized environments and familiarity with GitOps flow.
• Proven ability to work independently with minimal supervision, manage complex tasks, and prioritize multiple tasks based on strategic goals.
• Demonstrated passion for technology, a desire to build security tooling from the ground up, and the ability to tackle complex problems creatively.

Nice To Haves

• Experience with cloud platforms such as Azure, AWS, or Google Cloud.
• Proficiency in programming languages such as Python, Elixir, or Go.
• Previous experience in the defense or aerospace industry.
• Familiarity with developer security and security operations practices and tools.
• Eligibility to obtain and maintain an active U.S. Top Secret clearance.

Responsibilities

• Identify, assess, and mitigate security risks in software products, ensuring robust security measures are in place.
• Drive continual improvements in the quality and automation of vulnerability adjudication and remediation processes.
• Stay current with the latest security vulnerabilities and mitigation techniques and contribute to True Anomaly's security automation roadmap.
• Perform comprehensive security code reviews to identify potential vulnerabilities and provide actionable remediation suggestions.
• Evaluate and integrate third-party security solutions to enhance overall security posture.
• Implement NIST controls, FedRAMP High controls, and Security Technical Implementation Guides (STIGs) across applications.
• Collaborate closely with developers to address and resolve security vulnerabilities, fostering a culture of security excellence.

Benefits

• California Base Salary: $175,000-$245,000
• Colorado Base Salary: $155,000-$215,000
• Washington D.C. Base Salary: $160,000-$225,000
• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Number of Employees: 101-250 employees