Mission-Focused Application Security Engineer (DevSecOps)

SciTec Incorporated; Boulder (CO); On-site; USD 102,000 - 157,000; Full time

Benefits offered by this job

4% Safe Harbor 401(k) match

Company-paid health insurance (HSA)

Dental/ Vision insurance

Life insurance

Paid time off

Job summary

SciTec Incorporated, a Firefly Aerospace Company, seeks an Application Security Engineer to secure mission-critical software systems. You will perform both automated and manual security analyses (SAST, SCA, fuzzing), identify vulnerabilities, and help embedding security into the development lifecycle in a DevSecOps environment.

You will collaborate with software engineers, support threat modeling, and stay current with vulnerabilities and mitigations.

Qualifications

• Bachelor’s degree plus 2+ years of professional experience in cybersecurity or software development, or equivalent experience.
• 2+ years of experience focused on application/security
• Experience analyzing source code for security flaws
• Familiarity with secure software development practices
• Strong analytical, problem-solving, and communication skills
• Detail-oriented with strong written and verbal communication abilities
• Ability to qualify for and maintain a DoD or DoE Secret security clearance
• Ability to meet DoD 8140.01 Cyberspace Workforce Management requirements within six months of hire
• Good verbal and written communication skills
• Attention to detail

Responsibilities

• Perform application security analysis using both automated and manual techniques, including SAST, SCA, fuzzing, and manual code/design reviews
• Identify, analyze, and remediate application vulnerabilities
• Support engineers in integrating security into designs and CI/CD/DevSecOps pipelines
• Design, implement, and improve continuous integration security analysis tooling
• Tune and maintain security tools to reduce false positives and improve signal quality
• Document findings, recommendations, and best practices
• Stay current with emerging vulnerabilities and mitigation strategies
• Assist development teams in understanding findings and fixes
• Support threat modeling and secure design reviews
• Perform other duties as assigned

Skills

C++

Python

JavaScript

Rust

Analytical thinking

Communication skills

Education

Bachelor’s degree

Tools

Coverity

Klocwork

SonarQube

Snyk

JFrog Xray

AFL

Ghidra/IDA Pro

Job description

SciTec Incorporated, a Firefly Aerospace Company, seeks an Application Security Engineer to secure mission-critical software systems. You will perform both automated and manual security analyses (SAST, SCA, fuzzing), identify vulnerabilities, and help embedding security into the development lifecycle in a DevSecOps environment.

You will collaborate with software engineers, support threat modeling, and stay current with vulnerabilities and mitigations.