Senior Software Security Engineer

Responsibilities

• Participate in design and architecture discussions and perform lightweight threat modeling for new features and services.
• Identify risky authentication, data handling, integration, and database patterns and recommend secure alternatives.
• Define security requirements and acceptance criteria for engineering planning and ticketing.
• Conduct manual and tool-assisted secure code reviews across C#, Python, React, and Postgres.
• Identify vulnerabilities including injection, access control issues, data exposure, XSS, insecure deserialization, improper input validation, authorization flaws, and unsafe dynamic code.
• Provide clear remediation guidance directly to engineers.
• Support CMMC 2.0 alignment for applicable contracts and data handling requirements.
• Maintain secure coding guidelines, track recurring vulnerability patterns, and contribute to developer training.
• Partner with engineering leads to balance security rigor with delivery timelines.

Requirements

• Professional experience in application security, software security engineering, or a related security-focused engineering role.
• Strong proficiency reading and reasoning about C# and Python code.
• Working knowledge of React and common front-end and web security issues.
• Experience reviewing Postgres or other relational database queries and schemas for security issues.
• Experience conducting security reviews during both design/planning and code-review stages.
• Familiarity with the OWASP Top 10, secure design principles, and basic threat modeling such as STRIDE.
• Strong written and verbal communication skills for explaining security tradeoffs to technical and non-technical stakeholders.
• Preferred experience in a large-scale technology company or defense industrial base environment.
• Familiarity with CMMC 2.0, DFARS, NIST 800-171, or similar federal and defense compliance frameworks.
• Preferred CSSLP, GWAPT, GSSP, CISSP, OSCP, or Security+ certification.
• Experience with SAST/DAST tooling, CI/CD security checks, SBOM and software supply chain security is a plus.
• Familiarity with AWS or Azure environments is a plus.

Benefits

• Competitive base salary of $175,000–$200,000 USD.
• Equity ownership in a rapidly growing advanced energy company.
• Comprehensive medical benefits.
• Unlimited PTO.
• Free daily lunch and dinner provided onsite.
• Generous PPE stipend.
• High-impact startup environment with significant ownership and autonomy.
• Opportunities for rapid career growth and internal advancement.
• Direct collaboration with experienced operators, engineers, and industry leaders.