Senior AppSec Engineer – Regulated Apps

Milestone Technologies, Inc.; Torrance (CA); On-site; USD 140,000 - 180,000; Full time

Job summary

Milestone Technologies, Inc. is seeking a Senior Application Security Engineer to embed security into the software development lifecycle for custom applications handling CUI and ITAR-regulated data.

The role focuses on secure design, threat modeling, and secure coding across Python/Java, deployed on AWS, Azure, Palantir Foundry, and Kubernetes. You will collaborate with engineering teams to enforce data protection, implement secure API designs, and support DOE/NRC regulatory programs while

Qualifications

• 5+ years in application security or security engineering with ownership of an AppSec program.
• Hands-on security across AWS and Azure including IAM, secrets management, logging/monitoring.
• Experience securing Kubernetes environments (RBAC, network policies, image scanning).
• Proficient in reading Python and Java code for secure fixes (OWASP Top 10).
• Experience securing REST/GraphQL APIs, OAuth2/OIDC, and API gateway controls.
• Direct experience with CUI/ITAR data handling requirements.
• Strong ability to work embedded with engineering teams as a trusted advisor.

Responsibilities

• Partner with software engineers to identify and remediate security risks in custom applications processing CUI, ITAR, and UCNI.
• Perform threat modeling, secure architecture reviews, and design reviews for new features and services.
• Conduct secure code reviews for Python and Java codebases.
• Review and harden API design/API gateway configurations (OAuth2/OIDC, mTLS).
• Contribute security architecture artifacts (data flow diagrams, trust-zone diagrams).
• Own and mature the application security program aligned to CMMC 2.0 Level 2, including SSP/POA&M.
• Support DOE/NRC program alignment and audits for controlled systems.
• Secure CI/CD pipelines in GitHub to satisfy regulatory requirements.
• Define guardrails for Kubernetes workloads and AI data handling guidelines.
• Work with Palantir Foundry pipelines to enforce data classification and access controls.
• Develop secure coding training and threat modeling workshops for engineers.
• Evaluate new tools and cloud services for security posture.

Skills

Application security

Cloud security (AWS/Azure)

Kubernetes security

CI/CD security (GitHub Actions)

Threat modeling (STRIDE)

Secure SDLC

Python/Java secure coding

API security (REST/GraphQL)

Regulatory compliance (CMMC/DOE/NRC)

Engineering collaboration

Tools

GitHub Actions

Palantir Foundry

Kubernetes tooling

OWASP ZAP

SAST/DAST tooling

Job description

Milestone Technologies, Inc. is seeking a Senior Application Security Engineer to embed security into the software development lifecycle for custom applications handling CUI and ITAR-regulated data.

The role focuses on secure design, threat modeling, and secure coding across Python/Java, deployed on AWS, Azure, Palantir Foundry, and Kubernetes. You will collaborate with engineering teams to enforce data protection, implement secure API designs, and support DOE/NRC regulatory programs while