Senior Application Security Engineer (DoD/Cloud)

trueanomalyinc; Denver (CO); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Healthcare coverage

Flexible time off

Lunch provided

401(k) retirement plan

Fitness reimbursement

Dog Fridays

Equity participation

Job summary

True Anomaly in Denver seeks an Application Security Engineer III to implement and audit security controls for space systems meeting government standards. You will work at the intersection of security engineering, compliance frameworks (NIST 800-171/800-53), and modern cloud-native architectures to safeguard satellite mission control software and flight systems.

You will design and implement application-level security controls including audit logging, incident response capabilities, access

Qualifications

• 3+ years of experience in application security, product security, or security engineering.
• Hands-on experience implementing security controls for compliance frameworks such as NIST 800-171, NIST 800-53, FedRAMP, or CMMC.
• Strong software engineering skills with ability to write production-quality code in Python, Rust, Elixir, C++, or similar.
• Experience with cloud security (Azure preferred, AWS or GCP acceptable).
• Threat modeling and risk assessment; authentication/authorization patterns (OAuth2, JWT, RBAC, ABAC); cryptography basics.
• Eligible for DoD Secret or TS/SCI clearance.

Responsibilities

• Create security architecture documentation and operational security guides for government authorization processes.
• Drive vulnerability management program with defined SLAs for remediation (30/90/180 days by severity).
• Perform security code reviews for Elixir, Python, C++, and JavaScript codebases.
• Collaborate in the triage and management of security automations using SAST (CodeQL, Semgrep), SCA (JFrog Xray), and DAST tools.
• Collaborate with engineering teams to address security findings and implement secure coding practices.
• Develop and deliver security training to software engineers and systems administrators across the organization.
• Create and manage incident response playbooks specific to application security events.
• Evaluate and integrate third-party security solutions to enhance overall security capabilities.

Skills

Application security

Python

Rust

Elixir

C++

OAuth2/JWT

Cloud security

Threat modeling

Zero Trust

Team collaboration

DoD clearance eligible

Job description

True Anomaly in Denver seeks an Application Security Engineer III to implement and audit security controls for space systems meeting government standards. You will work at the intersection of security engineering, compliance frameworks (NIST 800-171/800-53), and modern cloud-native architectures to safeguard satellite mission control software and flight systems.

You will design and implement application-level security controls including audit logging, incident response capabilities, access