Spacecraft Ground Software Security Engineer

Firefly Aerospace, Inc.; Leander (TX); On-site; USD 114,000 - 172,000; Full time

Benefits offered by this job

Unlimited PTO

3-month sabbatical every 5 years

Health, dental and vision plans

Family/parental leave

Educational reimbursement

Stock benefits

Job summary

Firefly Aerospace, Inc. is seeking an Application Security Engineer for ground software to safeguard mission‑critical systems from pre‑launch to lunar operations. You will apply full‑stack engineering insights with rigorous security practices across web, backend, databases, and cloud services.

You will enforce secure coding standards, perform vulnerability assessments, and collaborate with DevOps and engineering teams to embed security controls throughout the software lifecycle.

Qualifications

• BS in Computer Science, Software Engineering, Cybersecurity, or related technical field.
• 5+ years of experience in software engineering with a focus on application security.
• Proficiency in modern programming frameworks (React, Node.js, Python).
• Hands-on experience with vulnerability scanning and application security testing tools (e.g., SonarQube, Snyk, Fortify, Veracode, OWASP ZAP).
• Strong understanding of secure coding practices (OWASP Top 10, CWE Top 25).
• Knowledge of government and national security standards (e.g., NIST 800-53, DoD STIGs, FIPS 140-3).
• Experience with container and cloud security (Docker, Kubernetes, AWS IAM, Secrets Management).
• Familiarity with CI/CD security integration
• Strong understanding of authentication and authorization, with the ability to apply encryption correctly (vetted libraries, TLS, secrets handling).
• Experience working in high‑reliability, safety‑critical, or regulated environments.

Responsibilities

• Design, implement, and maintain security controls for spacecraft ground software systems, spanning front‑end, back‑end, databases, and cloud services.
• Perform software scanning, code reviews, and vulnerability assessments using industry‑standard tools and processes.
• Define and enforce secure coding practices across development teams.
• Integrate static and dynamic application security testing (SAST/DAST) into CI/CD pipelines.
• Collaborate with developers to remediate vulnerabilities and design secure architectures.
• Translate and implement government and national software security standards (e.g., NIST, DoD STIGs).
• Architect and maintain IAM, RBAC, and secure API authentication.
• Work with DevOps to deploy hardened software in containerized and cloud environments (Docker, Kubernetes, AWS).
• Support audits, security reviews, and Authority to Operate (ATO) processes for classified and mission‑critical systems.

Skills

React

Node.js

Python

Education

BS in Computer Science/Software Engineering/Cybersecurity

Tools

SonarQube

Snyk

Fortify

Veracode

OWASP ZAP

Docker

Kubernetes

AWS

Job description

Firefly Aerospace, Inc. is seeking an Application Security Engineer for ground software to safeguard mission‑critical systems from pre‑launch to lunar operations. You will apply full‑stack engineering insights with rigorous security practices across web, backend, databases, and cloud services.

You will enforce secure coding standards, perform vulnerability assessments, and collaborate with DevOps and engineering teams to embed security controls throughout the software lifecycle.