Cybersecurity Engineer III (AppSec)

Sierra Nevada Company, LLC; Lone Tree (CO); Hybrid; USD 131,000 - 180,000; Full time

Benefits offered by this job

Medical, dental and vision plans

401(k) with 150% match up to 6%

Life insurance

3 weeks paid time off

Tuition reimbursement

Job summary

Sierra Nevada Company, LLC is seeking a Cybersecurity Engineer III to lead design, testing, and implementation of secure OS, networks, and monitoring tools. The role includes overseeing security systems, incident responses, risk assessments, and integrating new tools to strengthen security posture.

The candidate will work with DevSecOps to integrate automated tooling into CI/CD and drive a culture of security across development teams.

Qualifications

• Bachelor's degree in Cybersecurity, Network Engineering, Information Technology or related Engineering field of study.
• 5+ years of experience in a related role.
• 3+ years of experience focused on application security or DevOps/DevSecOps.
• Strong understanding of core cybersecurity principles as they relate to secure software design and the SDLC.
• Demonstrated ability to collaborate with development teams as a security partner.
• Ability to work in office or hybrid environment.
• Prolonged periods sitting at a desk and working on a computer.
• Ability to travel as needed.
• The ability to obtain and maintain a Secret U.S. Security Clearance is required.

Responsibilities

• Application Security Analysis using SAST/DAST/CA tools and code reviews.
• Secure Design Review with developers to embed security in designs.
• DevSecOps integration with CI/CD tooling and gates.
• Tooling and Pipeline Reviews for security standards adherence.
• AI and Emerging Capability support for AppSec improvements.
• Culture of Security collaboration with developers to balance velocity.
• Collaboration with development teams to support secure innovation.

Skills

5+ years experience in a related role

3+ years experience in application/Dev

Strong cybersecurity fundamentals

Programming languages: C++, Python, JS

Education

Bachelor's degree in Cybersecurity, Network Engineering, IT or related Engineering

Tools

Sonarqube

Semgrep

Trivy

JFrog Xray

JFrog Artifactory

GitHub Actions

Terraform

Ansible

Job description

Hybrid or in office

Lone Tree, CO

Arlington, VA

Sparks, NV

Full time

R0031396

Are you known for your attention to detail, are highly organized, and pride yourself on technical acumen? The Cybersecurity Engineer III will lead efforts in designing, testing, and implementing secure operating systems, networks, and security monitoring tools. This senior-level role includes overseeing IT security systems, managing incident responses, conducting in-depth risk assessments, and developing advanced security controls. The Engineer III will also research, recommend, and integrate new security tools and technologies to strengthen the company's security framework.

As SNC's corporate team, we provide the company and its business areas with strategic direction and business support spanning executive management, finance and accounting, operations, human resources, legal, IT, information security, facilities, marketing, and communications.

Responsibilities:

• Application Security Analysis: Perform application security analysis using both automated tooling (SAST, SCA, DAST, etc) and code reviews to assist development teams in understanding, triaging, and treating discovered vulnerabilities




• Secure Design Review: Review proposed designs for security control implementations and secure design; work with developers to integrate security considerations into system and application designs




• DevSecOps Integration: Work with DevOps engineers to integrate and maintain automated security tooling and gates into CI/CD workflows




• Tooling and Pipeline Reviews: Audit security scan tool and workflow security gate configurations for adherence to enterprise security standards; support continuous improvement of tooling workflow design




• AI and Emerging Capability Support: Advise and support the business in implementation of AI-augmented Application Security measures and other emerging improvements in the AppSec field




• Culture of Security: Serve as a trusted partner and security expert for developers to foster a culture of security within development teams




• Collaboration: Collaborate with development teams to support secure innovation while protecting developer velocity and business outcomes

Qualifications You Must Have:

• Bachelor's degree in Cybersecurity, Network Engineering, Information Technology or related Engineering field of study




• 5+ years of experience in a related role




• Relevant experience can be considered as a substitute for the required educational qualifications. In the absence of a degree, a minimum of 9 years of related experience is required




• Higher level relevant degree may substitute for experience.




• 3+ years of experience focused on application security or DevOps/DevSecOps




• Strong understanding of core cybersecurity principles as they relate to secure software design and the system development lifecycle including: identity and access management, secrets management, integration security, encryption and data handling, audit logging and monitoring, and supply chain security




• Demonstrated experience supporting the system development lifecycle including planning, requirements, design, implementation, testing, deployment, and maintenance




• Hands-on experience configuring and integrating security tools and requirements into CI/CD workflows.




• Hands-on experience analyzing source code and security tool outputs, evaluating exploitability and risk levels, and triaging findings appropriately




• Strong understanding of secure coding practices and DevSecOps principles




• Demonstrated ability to successfully communicate and collaborate with development teams as a trusted security partner




• Working knowledge of NIST SP 800-171, NIST SP 800-218, and OWASP standards




• Proven experience with security monitoring and assessment tools




• Experience supporting, troubleshooting, and administering a variety of networks, Operating Systems (OSs), and applications




• Advanced knowledge of data security administration principles, methods, and techniques




• Strong knowledge and experience administering a variety of current Microsoft platforms




• In-depth understanding of domain structures, user authentication, and digital signatures




• The ability to obtain and maintain a Secret U.S. Security Clearance is required

Qualifications We Prefer:

• Experience with the following technologies: Sonarqube, Semgrep, Trivy, JFrog Xray, JFrog Artifactory, GitHub Actions, Terraform, Ansible




• Proficiency in one or more programming languages such as C++, Python, or JavaScript




• Demonstrated experience designing and implementing Policy as Code




• Understanding of Infrastructure as Code and cloud native application technologies including Kubernetes, Docker, and API management




• Understanding of AI system security principles




• Demonstrated experience securing applications with AI components

Essential Functions:

• Ability to work in an office or hybrid environment.




• Prolonged periods sitting at a desk and working on a computer.




• Ability to lift up to 20 pounds occasionally.




• Ability to travel as needed.

This posting will be open for application for a minimum of 5 days and may be extended based on business needs.

Estimated Starting Salary Range: $131,010.00 - $180,138.75. Compensation varies depending on a wide array of factors, such as candidates' key skills, relevant work experience, and education/training/certifications. The disclosed range estimate may be adjusted for any applicable geographic differential associated with the location at which the position may be filled.

SNC offers a generous benefit package, including medical, dental, and vision plans, 401(k) with 150% match up to 6%, life insurance, 3 weeks paid time off, tuition reimbursement, and more (https://www.sncorp.com/careers/total-rewards/) .

IMPORTANT NOTICE:

This position requires the ability to obtain and maintain a Secret U.S. Security Clearance. U.S. Citizenship status is required as this position needs an active U.S. Security Clearance for employment. Non-U.S. citizens may not be eligible to obtain a security clearance. The Department of Defense Consolidated Adjudications Facility (DoD CAF), a federal government agency, handles the adjudicative aspects of the security clearance eligibility process for industry applicants. Adjudicative factors which affect the outcome of the eligibility determination include, but are not limited to, allegiance to the U.S., foreign influence, foreign preference, criminal conduct, security violations and illegal drug use.

Learn more about the background check process for Security Clearances. (https://www.dcsa.mil/About/)

SNC is a global leader in aerospace and national security committed to moving the American Dream forward. We’re known and respected for our mission and execution focus, agility, and disruptive and rapid innovation. We provide leading edge technologies and transformative solutions that support our nation’s most critical security needs. If you are mission-focused, thrive in collaborative environments, and want to make our country stronger with state-of-the-art technologies that safeguard freedom, join our team!

SNC is an Equal Opportunity Employer committed to an environment free of discrimination. Employment decisions are made based on merit without regard to race, color, age, religion, sex, national origin, disability, status as a protected veteran or other characteristics protected by law.

SNC is a trusted global leader in aerospace and national security. Our innovative solutions enable connected protection through command, control and communications systems, as well as ISR, cyber, electromagnetic spectrum management, and other high capabilities for systems across all domains – sea, land, air, space and cyber.

As a longstanding leader in defense technology, SNC is the optimum intersection of commercial, defense and non-traditional contractors. We are one of the only privately owned mid-tier A&D contractors and we pride ourselves on our ability to invest early and often to ensure mission success on or ahead of schedule. It’s part of our mission to always stay one step ahead; working on solutions today to solve the problems of tomorrow.

Founded in 1963, SNC is owned by Chairwoman Eren Ozmen and CEO Fatih Ozmen.