Defense App Security Engineer | DevSecOps, Flexible Hours

SciTec; Boulder (CO); On-site; USD 102,000 - 157,000; Full time

Benefits offered by this job

401(k) match

Company-paid health insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

Paid parental leave

Paid time off

Flexible work hours

Job summary

SciTec, a Firefly Aerospace Company, is hiring an Application Security Engineer to secure mission-critical software for national defense. You will perform automated and manual security analyses, support DevSecOps tooling, and work with software engineers to embed security in the development lifecycle.

The role requires 2+ years in cybersecurity or software development, proficiency in multiple languages, and the ability to obtain/maintain a DoD Secret clearance.

Qualifications

• Bachelor’s degree in cybersecurity or related field plus 2+ years in security or software development.
• 2+ years focused on application/security analysis and secure coding practices.
• Ability to qualify for and maintain a DoD or DoE Secret clearance within six months.
• Strong written and verbal communication with detail orientation.

Responsibilities

• Perform application security analysis using automated and manual techniques (SAST, SCA, fuzzing, reviews).
• Identify, analyze, and remediate vulnerabilities in software products.
• Assist dev teams in embedding security into designs and CI/CD pipelines.
• Tune security tooling to reduce false positives and improve signal quality.
• Support threat modeling and secure design reviews; stay current on vulnerabilities.
• Document findings and best practices for engineering teams.

Skills

C++

Python

JavaScript

Rust

Threat modeling

DevSecOps

Agile

DoD clearance

Education

Bachelor’s degree in cybersecurity or related field

Tools

Coverity

Klocwork

SonarQube

AFL

AFL++

honggfuzz

strace

eBPF

Ghidra

IDA Pro

Job description

SciTec, a Firefly Aerospace Company, is hiring an Application Security Engineer to secure mission-critical software for national defense. You will perform automated and manual security analyses, support DevSecOps tooling, and work with software engineers to embed security in the development lifecycle.

The role requires 2+ years in cybersecurity or software development, proficiency in multiple languages, and the ability to obtain/maintain a DoD Secret clearance.