Senior App Sec Engineer – DoD Compliance, Cloud

True Anomaly, Inc.; Denver, Long Beach (CO, CA); On-site; USD 170,000 - 255,000; Full time

Benefits offered by this job

Best-in-class healthcare

Generous time off

Daily catered lunch

Equity participation

401(k) retirement plan

Dog Fridays

Fitness reimbursement

Parental Leave

Sick Leave

Job summary

True Anomaly, Inc. in Denver/Long Beach seeks a Senior Application Security Engineer to implement and audit security controls for mission-critical space systems meeting DoD standards.

You will work at the intersection of security engineering, compliance frameworks, and cloud-native architectures to secure satellite mission control software and flight systems. You will design and implement application-level security controls, audit logging, incident response, access controls, and monitoring while

Qualifications

• 5+ years in application security or security engineering.
• Hands-on with security controls for NIST/NIST FedRAMP/CMMC.
• Strong software engineering skills in Python, Rust, Elixir, or C++.
• Cloud security experience (Azure preferred).
• Understanding of zero trust, threat modeling, and auth patterns.

Responsibilities

• Create security architecture documentation for government authorization processes
• Drive vulnerability management with SLAs (30/90/180 days)
• Collaborate on security automations using SAST/DAST/SCA tools
• Work with engineering to implement secure coding practices
• Develop and deliver security training for engineers and admins
• Create incident response playbooks for application security events
• Evaluate third-party security solutions to enhance capabilities

Skills

Security engineering

NIST 800 171/800 53

Python/Rust/C++

Cloud security

OAuth2/JWT

Tools

CodeQL

Semgrep

JFrog Xray

DAST tools

Job description

True Anomaly, Inc. in Denver/Long Beach seeks a Senior Application Security Engineer to implement and audit security controls for mission-critical space systems meeting DoD standards.

You will work at the intersection of security engineering, compliance frameworks, and cloud-native architectures to secure satellite mission control software and flight systems. You will design and implement application-level security controls, audit logging, incident response, access controls, and monitoring while