Application Security Engineer – Ground Software
Firefly Aerospace, Inc.
Recebe uma resposta deste empregador
O teu currículo e carta de apresentação, adaptados exatamente ao que estão a contratar.
Vantagens oferecidas por esta oferta de emprego
Resumo da oferta
Firefly Aerospace, Inc. is seeking an Application Security Engineer for ground software to safeguard mission‑critical systems from pre‑launch to lunar operations. You will apply full‑stack engineering insights with rigorous security practices across web, backend, databases, and cloud services.
You will enforce secure coding standards, perform vulnerability assessments, and collaborate with DevOps and engineering teams to embed security controls throughout the software lifecycle.
Qualificações
- BS in Computer Science, Software Engineering, Cybersecurity, or related technical field.
- 5+ years of experience in software engineering with a focus on application security.
- Proficiency in modern programming frameworks (React, Node.js, Python).
- Hands-on experience with vulnerability scanning and application security testing tools (e.g., SonarQube, Snyk, Fortify, Veracode, OWASP ZAP).
- Strong understanding of secure coding practices (OWASP Top 10, CWE Top 25).
- Knowledge of government and national security standards (e.g., NIST 800-53, DoD STIGs, FIPS 140-3).
- Experience with container and cloud security (Docker, Kubernetes, AWS IAM, Secrets Management).
- Familiarity with CI/CD security integration
- Strong understanding of authentication and authorization, with the ability to apply encryption correctly (vetted libraries, TLS, secrets handling).
- Experience working in high‑reliability, safety‑critical, or regulated environments.
Responsabilidades
- Design, implement, and maintain security controls for spacecraft ground software systems, spanning front‑end, back‑end, databases, and cloud services.
- Perform software scanning, code reviews, and vulnerability assessments using industry‑standard tools and processes.
- Define and enforce secure coding practices across development teams.
- Integrate static and dynamic application security testing (SAST/DAST) into CI/CD pipelines.
- Collaborate with developers to remediate vulnerabilities and design secure architectures.
- Translate and implement government and national software security standards (e.g., NIST, DoD STIGs).
- Architect and maintain IAM, RBAC, and secure API authentication.
- Work with DevOps to deploy hardened software in containerized and cloud environments (Docker, Kubernetes, AWS).
- Support audits, security reviews, and Authority to Operate (ATO) processes for classified and mission‑critical systems.
Conhecimentos
Formação académica
Ferramentas
Descrição da oferta de emprego
At Firefly, we’re focused on making space attainable for everyone – including you! Each team member’s passion, dedication, and innovative ideas have a direct impact on fueling our successful trajectory into space. And there’s no shortage of meaningful projects to work on at Firefly. With launch, lunar, and orbital vehicles, Firefly has a diverse line of business with opportunities to get hands‑on experience launching rockets, operating in space, and landing on the Moon.
What does SciTec bring to the Firefly family?
...
What does SciTec bring to the Firefly family?
...
216 0
Peep our Elytra orbiter being assembled in the ...
Peep our Elytra orbiter being assembled in the ...
672 3
Start your week with another Manufacturing Minute! ...
Start your week with another Manufacturing Minute! ...
418 11
This World Space Week, remember to look up and ...
This World Space Week, remember to look up and ...
The engine powering Alpha`s first stage is truly ...
The engine powering Alpha`s first stage is truly ...
844 4
More cleanroom space. More spacecraft in ...
More cleanroom space. More spacecraft in ...
691 4
Headquartered in the Lone Star State, Firefly’s hardworking team reflects Texas’ GO BIG culture in everything we do. We build big, achieve big, and dream big. We’re building launch vehicles and spacecraft to provide rapid, reliable space access. We’ve achieved some incredible wins, including the first successful commercial Moon landing. And we’re dreaming bigger than this planet with ambitions to Mars, Venus, and beyond. Our core values are what drive us along the way.
Fireflies believe in perseverance, responsiveness, and mentoring others with a focus on inspiring a better future.
Fireflies act with integrity and take ownership of our actions, commitments, decisions, and outcomes.
Fireflies work in alignment across teams and communicate clearly with mutual respect for one another.
Fireflies deliver high-quality work through technical rigor and timely disciplined execution for our customers.
We take care of our Fireflies with some of the best benefits in the industry. Our mission to make space for everyone starts with our employees and allowing them to make space for their family, their career, and their future.
- Unlimited PTO for exempt employees
- 3-month sabbatical for every 5 years of service
- Medical, dental, vision, life, and disability insurance
- Mental health services
- Paid military leave
- 12 weeks paid maternity leave
- 4 weeks paid spouse leave
- $20k towards family planning: fertility, surrogacy, adoption
- Dog friendly workplace
- $10k/year towards trade school or college
- Ongoing coaching to advance leadership skills
- Employee-ownership with stock bonuses
- 4% Safe Harbor 401(k) matching
- $10k bonus for home purchase in Cedar Park, Texas
From launch technicians to propulsion engineers, Firefly has open roles across the company. We’re looking for passionate, bright innovators to join our team and help make space an achievable dream for everyone.
Firefly Aerospace is a space and defense technology company that enables our world to launch, land, and operate in space – anywhere, anytime. As the partner of choice for critical space missions, Firefly is the only commercial company to launch a satellite to orbit with 24-hour notice and the only company to achieve a successful Moon landing. Our launch vehicles, lunar landers, and orbital vehicles provide government and commercial customers with full mission services from low Earth orbit to the Moon and beyond. Headquartered in north Austin, Texas, Firefly is looking for passionate, hardworking innovators to join our team and help fuel our successful trajectory into space.
Firefly Aerospace is a space and defense technology company on a mission to reliably and repeatedly launch, land, and operate space systems from Earth to the Moon and beyond. As the partner of choice for critical space missions, Firefly is the first commercial company to launch a satellite to orbit with 24-hour notice and the first company to achieve a successful Moon landing. Headquartered in north Austin, Texas, Firefly is looking for passionate, hardworking innovators to join our team and help fuel our successful trajectory into space.
As an Application Security Engineer at Firefly Aerospace, you will safeguard the mission‑critical software systems that enable our spacecraft operations from the ground. You will bring full‑stack engineering expertise together with deep knowledge of security practices to ensure our ground software and space assets remain resilient against threats.
In this role, you will design, implement, and enforce security policies, conduct vulnerability assessments, and integrate secure development practices across the ground software stack—including web applications, backend services, databases, and cloud infrastructure. You will collaborate closely with engineering, IT, and operations teams to embed security controls into every phase of the software lifecycle, ensuring Firefly missions remain safe and secure from pre‑launch to lunar landing.
- Design, implement, and maintain security controls for spacecraft ground software systems, spanning front‑end, back‑end, databases, and cloud services.
- Perform software scanning, code reviews, and vulnerability assessments using industry‑standard tools and processes.
- Define and enforce secure coding practices across development teams.
- Integrate static and dynamic application security testing (SAST/DAST) into CI/CD pipelines.
- Collaborate with developers to remediate vulnerabilities and design secure architectures.
- Translate and implement government and national software security standards (e.g., NIST, DoD STIGs).
- Architect and maintain identity and access management (IAM), role‑based access controls, and secure API authentication.
- Work with DevOps to deploy hardened software in containerized and cloud environments (Docker, Kubernetes, AWS).
- Support audits, security reviews, and Authority to Operate (ATO) processes for classified and mission‑critical systems.
Required:
- BS in Computer Science, Software Engineering, Cybersecurity, or related technical field.
- 5+ years of experience in software engineering with a focus on application security.
- Proficiency in modern programming frameworks (React, Node.js, Python).
- Hands‑on experience with vulnerability scanning and application security testing tools (e.g., SonarQube, Snyk, Fortify, Veracode, OWASP ZAP).
- Strong understanding of secure coding practices (OWASP Top 10, CWE Top 25).
- Knowledge of government and national security standards (e.g., NIST 800‑53, DoD STIGs, FIPS 140‑3).
- Experience with container and cloud security (Docker, Kubernetes, AWS IAM, Secrets Management).
- Familiarity with CI/CD security integration
- Strong understanding of authentication and authorization, with the ability to apply encryption correctly (vetted libraries, TLS, secrets handling).
- Experience working in high‑reliability, safety‑critical, or regulated environments.
- Advanced degree or equivalent hands‑on experience in a related technical field.
- Experience deploying software to classified or government systems.
- Prior involvement in achieving or maintaining an Authority to Operate (ATO).
- Background in mission‑critical or aerospace ground systems.
- Hands‑on experience supporting incident response from the remediation side with root‑cause analysis, coordinating fixes, and hardening.
- Active security clearance (Secret or higher) or eligibility to obtain one.
- Security certifications such as CISSP, CSSLP, CEH, or GIAC.
Firefly offers outstanding benefits for our employees, including generous health, dental and vision plans with low plan deductibles, parental leave, educational reimbursement, short term disability, and flexible PTO options.
To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.
Firefly Aerospace, Inc. is an Equal Opportunity Employer; employment with Firefly is governed based on merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status
$113,600.00 - $172,247.00
Firefly Aerospace is a space and defense technology company that enables our world to launch, land, and operate in space – anywhere, anytime. As the partner of choice for critical space missions, Firefly is the only commercial company to launch a satellite to orbit with 24-hour notice and the only company to achieve a successful Moon landing. Our launch vehicles, lunar landers, and orbital vehicles provide government and commercial customers with full mission services from low Earth orbit to the Moon and beyond. Headquartered in north Austin, Texas, Firefly is looking for passionate, hardworking innovators to join our team and help fuel our successful trajectory into space.
Firefly Aerospace is a space and defense technology company on a mission to reliably and repeatedly launch, land, and operate space systems from Earth to the Moon and beyond. As the partner of choice for critical space missions, Firefly is the first commercial company to launch a satellite to orbit with 24-hour notice and the first company to achieve a successful Moon landing. Headquartered in north Austin, Texas, Firefly is looking for passionate, hardworking innovators to join our team and help fuel our successful trajectory into space.
As an Application Security Engineer at Firefly Aerospace, you will safeguard the mission‑critical software systems that enable our spacecraft operations from the ground. You will bring full‑stack engineering expertise together with deep knowledge of security practices to ensure our ground software and space assets remain resilient against threats.
In this role, you will design, implement, and enforce security policies, conduct vulnerability assessments, and integrate secure development practices across the ground software stack—including web applications, backend services, databases, and cloud infrastructure. You will collaborate closely with engineering, IT, and operations teams to embed security controls into every phase of the software lifecycle, ensuring Firefly missions remain safe and secure from pre‑launch to lunar landing.
- Design, implement, and maintain security controls for spacecraft ground software systems, spanning front‑end, back‑end, databases, and cloud services.
- Perform software scanning, code reviews, and vulnerability assessments using industry‑standard tools and processes.
- Define and enforce secure coding practices across development teams.
- Integrate static and dynamic application security testing (SAST/DAST) into CI/CD pipelines.
- Collaborate with developers to remediate vulnerabilities and design secure architectures.
- Translate and implement government and national software security standards (e.g., NIST, DoD STIGs).
- Architect and maintain identity and access management (IAM), role‑based access controls, and secure API authentication.
- Work with DevOps to deploy hardened software in containerized and cloud environments (Docker, Kubernetes, AWS).
- Support audits, security reviews, and Authority to Operate (ATO) processes for classified and mission‑critical systems.
Required:
- BS in Computer Science, Software Engineering, Cybersecurity, or related technical field.
- 5+ years of experience in software engineering with a focus on application security.
- Proficiency in modern programming frameworks (React, Node.js, Python).
- Hands‑on experience with vulnerability scanning and application security testing tools (e.g., SonarQube, Snyk, Fortify, Veracode, OWASP ZAP).
- Strong understanding of secure coding practices (OWASP Top 10, CWE Top 25).
- Knowledge of government and national security standards (e.g., NIST 800‑53, DoD STIGs, FIPS 140‑3).
- Experience with container and cloud security (Docker, Kubernetes, AWS IAM, Secrets Management).
- Familiarity with CI/CD security integration
- Strong understanding of authentication and authorization, with the ability to apply encryption correctly (vetted libraries, TLS, secrets handling).
- Experience working in high‑reliability, safety‑critical, or regulated environments.
- Advanced degree or equivalent hands‑on experience in a related technical field.
- Experience deploying software to classified or government systems.
- Prior involvement in achieving or maintaining an Authority to Operate (ATO).
- Background in mission‑critical or aerospace ground systems.
- Hands‑on experience supporting incident response from the remediation side with root‑cause analysis, coordinating fixes, and hardening.
- Active security clearance (Secret or higher) or eligibility to obtain one.
- Security certifications such as CISSP, CSSLP, CEH, or GIAC.
Firefly offers outstanding benefits for our employees, including generous health, dental and vision plans with low plan deductibles, parental leave, educational reimbursement, short term disability, and flexible PTO options.
To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.
Firefly Aerospace, Inc. is an Equal Opportunity Employer; employment with Firefly is governed based on merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status
$113,600.00 - $172,247.00
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
