freehire launches on Product Hunt on 26 August.

Follow →

SciTec

Discussion

Senior Application Security Engineering Lead

SciTec, a wholly owned subsidiary of Firefly Aerospace, is a dynamic non-traditional defense contractor that delivers advanced technologies in support of U.S. National Security and Defense. For more than forty-five years, we have supported Department of Defense customers by developing innovative remote sensing algorithms, tools, and techniques to deliver world-class data exploitation capabilities supporting missile defense; intelligence, surveillance, & reconnaissance; space domain awareness; and aircraft survivability missions.

Important Notice: SciTec exclusively works on U.S. government contracts that require U.S. citizenship for all employees. Applicants that do not meet this requirement will not be considered.

SciTec has an immediate opportunity for a talented engineer to support our programs delivering Next-Generation Missile Warning software. This is a unique opportunity to join a business delivering core capabilities for National defense. You will work within a fast-paced team delivering end-to-end software processing of Overhead Persistent InfraRed (OPIR) sensor data for Missile Warning, Missile Defense, Battlespace Awareness, and Technical Intelligence.

We are seeking an Application Security Engineer Lead to help secure mission-critical software systems by identifying, analyzing, and mitigating application-level vulnerabilities. This role focuses on hands-on security analysis, tooling integration, and working directly with software engineers to embed security into the development lifecycle.

The ideal candidate combines strong technical security skills with the ability to collaborate effectively with developers in a DevSecOps environment.

Responsibilities

  • Perform application security analysis using both automated and manual techniques, including:
    • Static code analysis (SAST)
    • Software composition analysis (SCA)
    • Fuzzing
    • Manual code and design reviews
  • Lead an application security team in support of multiple programs
  • Identify, analyze, and help remediate application vulnerabilities
  • Support software engineers in integrating security considerations into system and application designs
  • Integrate and maintain application security tooling within CI/CD and DevSecOps pipelines
  • Design, implement, and improve continuous integration security analysis tooling
  • Tune and maintain security tools to reduce false positives and improve signal quality
  • Assist development teams in understanding findings and implementing effective fixes
  • Support threat modeling and secure design reviews
  • Stay current with emerging vulnerabilities, attack techniques, and mitigation strategies
  • Document findings, recommendations, and best practices
  • Perform other duties as assigned

Requirements

  • Bachelor’s degree plus 8+ years of professional experience in cybersecurity or software development, or equivalent experience
  • 2+ years of experience focused on application/software security
  • Experience analyzing source code for security flaws
  • Familiarity with secure software development practices
  • Strong analytical and problem-solving skills
  • Detail-oriented with strong written and verbal communication abilities
  • Ability to qualify for and maintain a DoD Secret security clearance
  • Ability to meet DoD 8140.01 Cyberspace Workforce Management requirements within six months of hire
  • Ability to effectively collaborate with government customer team members and other engineers

Candidates who have any of the following skills will be preferred:

  • Active DoD Secret clearance or higher
  • Experience identifying, exploiting, and remediating application vulnerabilities
    • Credit for published CVEs is a strong plus
  • Proficiency in one or more programming languages such as C++, Python, JavaScript, Rust
  • Experience configuring and operating static analysis tools (e.g., Coverity, Klocwork, SonarQube)
  • Experience configuring and operating software composition analysis tools (e.g., Snyk, Sonatype, Anchore, JFrog Xray)
  • Experience with fuzzing frameworks (AFL, AFL++, honggfuzz, or similar)
  • Experience with debugging, runtime instrumentation, or reverse engineering, including tools such as strace, eBPF, Ghidra or IDA Pro
  • Familiarity with threat modeling methodologies and frameworks such as MITRE ATT&CK
  • Experience working in DevSecOps or Agile development environments

*Resumes, Cover Letters, and Applications which are generated by AI will not be considered for employment.

Colorado Residents: In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.

Benefits

SciTec offers a highly competitive salary and benefits package, including:

  • 4% Safe Harbor 401(k) match
  • 100% company paid HSA Medical insurance, with a choice of 2 buy-up options
  • 80% company paid Dental insurance
  • 100% company paid Vision insurance
  • 100% company paid Life insurance
  • 100% company paid Long-term Disability insurance
  • 100% company paid Hospital Indemnity insurance
  • Voluntary Accident and Critical Illness insurance
  • Short-term Disability insurance
  • Annual Profit-Sharing Plan
  • Discretionary Performance Bonus
  • Paid Parental Leave
  • Generous Paid Time Off, including Holiday, Vacation, and Sick Pay
  • Flexible Work Hours

The pay range for this position is $155,000 - $185,000 / year. SciTec considers several factors when extending an offer of employment, including but not limited to the role and associated responsibilities, a candidate's work experience, education/training, and key skills. This is not a guarantee of compensation.

SciTec is proud to be an Equal Opportunity employer. VET/Disabled.

Show

What this application asks

workable

First name, Last name, Email, Phone, Education, Experience, Summary, Resume, Cover letter

  • This position requires the ability to obtain and maintain a DoD security clearance, including the ability to demonstrate United States citizenship and pass a background check. Are you a United States citizen? yes / no
  • This is an onsite position in Boulder, CO. Are you able to work on site in Boulder, Colorado? yes / no
  • Do you have a current active DoD security clearance? yes / no
  • If you currently have DoD security clearance, what level of security clearance do you maintain?
  • Do you have professional or academic experience specifically focused on application or software security (e.g., SAST, SCA, fuzzing, secure design) yes / no
  • I have worked directly with software developers to remediate application security findings and improve secure design practices. yes / no
  • Which application security tools have you used or configured? written answer
  • Which programming languages are you comfortable reviewing for security issues? written answer
  • Which CI/CD or DevSecOps tools or workflows have you worked with to integrate application security? written answer
  • I authorize investigation of all statements contained in this application for employment as may be necessary in arriving at an employment decision. I hereby understand and acknowledge that, unless otherwise defined by applicable law, any employment relationship with this organization is of an "at will" nature, which means that the Employee may resign at any time and the Employer may discharge Employee at any time with or without cause. It is further understood that this "at will" employment relationship may not be changed by any written document or by conduct unless such change is specifically acknowledged in writing by an authorized executive of this organization. In the event of employment, I understand that false or misleading information given in my application or interview(s) may result in discharge. I understand, also, that I am required to abide by all rules and regulations of the employer. yes / no
  • I will complete the EEO forms listed on the following page. As a Federal Contractor, SciTec is subject to reporting this information by law. Information collected in these questions is not used in any applicant’s consideration for employment. yes / no

See also

164,235 jobs
Python jobs
46,047 jobs
JavaScript jobs
33,221 jobs
C++ jobs
7,881 jobs
Rust jobs
71,500 jobs
Security jobs
57,276 jobs
Lead jobs
17,590 jobs
Remote Worldwide jobs
65,042 jobs
TypeScript jobs
55,206 jobs
React jobs
7,557 jobs
Go jobs

Tailor your CV for this role?

We couldn't check your fit for this role — add a CV to your profile to see it next time.

A new version of freehire is available