Senior AppSec & DevSecOps Engineer

Sierra Nevada Corp; Lone Tree (CO); Hybrid; USD 131,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, and vision plans

401(k) with 150% match up to 6%

Life insurance

3 weeks paid time off

Tuition reimbursement

And more

Job summary

Sierra Nevada Corp is seeking a Cybersecurity Engineer III to design, test, and implement secure operating systems, networks, and monitoring tools. The role leads incident responses, risk assessments, and advanced security controls, while researching and integrating new security technologies to strengthen the security framework.

The position emphasizes collaboration with development teams to foster a culture of security and secure innovation within environments that demand high security and

Qualifications

• Application security analysis using automated tooling (SAST, SCA, DAST) and code reviews.
• Secure design reviews and integration of security into system/application designs.
• DevSecOps integration to CI/CD workflows with automated tooling and gates.
• Audit security tool configurations and improve tooling workflows.

Responsibilities

• Perform application security analysis using automated tooling and code reviews.
• Review proposed designs for security control implementations and secure design.
• Integrate security tooling and gates into CI/CD workflows with DevOps teams.
• Audit security tool configurations to ensure compliance with enterprise standards.
• Advise on AI-augmented AppSec measures and emerging security improvements in AppSec.

Skills

Application security

DevSecOps

Risk assessment

Security monitoring

NIST standards

Education

Bachelor's degree in Cybersecurity, Network Engineering, Information Technology or related Engineering field

Tools

Sonarqube

Semgrep

Trivy

JFrog Xray

JFrog Artifactory

GitHub Actions

Terraform

Ansible

Job description

Sierra Nevada Corp is seeking a Cybersecurity Engineer III to design, test, and implement secure operating systems, networks, and monitoring tools. The role leads incident responses, risk assessments, and advanced security controls, while researching and integrating new security technologies to strengthen the security framework.

The position emphasizes collaboration with development teams to foster a culture of security and secure innovation within environments that demand high security and