Application Security Engineer III

Responsibilities

• Create security architecture documentation and operational security guides for government authorization processes.
• Drive vulnerability management with severity-based remediation SLAs.
• Perform security code reviews across Elixir, Python, C++, and JavaScript codebases.
• Triage and manage SAST, SCA, and DAST security automation tools.
• Collaborate with engineering teams to remediate security findings and implement secure coding practices.
• Develop and deliver security training for software engineers and systems administrators.
• Create and manage application security incident response playbooks.
• Evaluate and integrate third-party security solutions.

Requirements

• At least 3 years of experience in application security, product security, or security engineering.
• Hands-on experience implementing controls for NIST 800-171, NIST 800-53, FedRAMP, or CMMC.
• Ability to write production-quality code in at least one language such as Python, Rust, Elixir, or C++.
• Experience with cloud security, preferably Azure, or AWS or GCP.
• Understanding of threat modeling, risk assessment, OAuth2, JWT, RBAC, ABAC, cryptography, key management, defense in depth, and Zero Trust.
• Ability to collaborate with engineering teams to implement security controls without blocking velocity.
• Eligibility for a DoD Secret or TS/SCI clearance.
• Preferred qualifications include active TS/SCI clearance, NIST 800-171 Rev 3 or NIST 800-53 implementation experience, DoD Impact Levels, STIGs, functional programming, Azure Government Cloud, FedRAMP-authorized environments, Ghommit, DevSecOps, platform security, GitOps, CI/CD security, infrastructure-as-code security, Kubernetes security, incident response, detection engineering, SOAR, regulated-industry experience, and startup experience.

Benefits

• 100% company-paid medical, dental, and vision coverage for employees and dependents, with HSA/HRA options.
• Flexible Time Off for exempt employees or accrued PTO of up to 25 days for non-exempt employees, plus 12 paid holidays, parental leave, and sick leave.
• Daily catered lunch and unlimited snacks for in-office employees.
• 401(k), fitness reimbursement, Dog Fridays, and equity participation.
• The role is primarily onsite near Denver or Long Beach, with significant work performed onsite.