Application Security Engineer
Location
United States
Posted
1 day ago
Salary
100K - 150K / year
Seniority
Mid Level
Job Description
Application Security Engineer
Bright Vision Technologies
Role Description We are looking for an Application Security Engineer to embed security throughout the software development lifecycle, partnering with engineering teams to design secure systems, identify vulnerabilities, and reduce risk across our application portfolio. The role blends hands-on offensive and defensive skills with strong communication and collaboration, helping development teams build secure software efficiently rather than slowing them down. The ideal candidate brings deep technical security expertise, strong software engineering fundamentals, and a track record of shipping security improvements that meaningfully reduce risk in production. Key Responsibilities - Conduct threat modeling and security architecture reviews for new and existing applications and services. - Perform manual code reviews, secure design consultations, and pair with engineering teams on hardening critical components. - Operate and tune SAST, DAST, IAST, SCA, and secret-scanning tools across CI/CD pipelines. - Drive vulnerability management workflows including triage, prioritization, owner assignment, and SLA tracking. - Build paved-road libraries and frameworks that make secure patterns the default for engineering teams. - Lead red-team and purple-team exercises against internal applications and drive remediation of identified weaknesses. - Implement and operate runtime protections including WAF, RASP, bot protection, and abuse-detection mechanisms. - Design and enforce secure authentication, authorization, session management, and cryptographic patterns. - Partner with infrastructure and platform teams to harden container, Kubernetes, and cloud environments. - Develop and deliver application security training, lunch-and-learns, and onboarding content for engineering staff. - Respond to security incidents involving application vulnerabilities or active exploitation. - Track and apply emerging threats and CVEs that may affect the application portfolio. - Maintain comprehensive, current technical documentation — including architecture diagrams, design decisions, configuration references, runbooks, and operational procedures. - Stay current with application security research and emerging defensive tooling. Qualifications - Bachelor’s degree in Computer Science, Cybersecurity, or a related field. - Five or more years of application security or security engineering experience. - Strong understanding of OWASP Top 10, common vulnerability classes, and modern exploit patterns. - Hands-on experience performing code review across at least two major languages. - Deep familiarity with SAST, DAST, SCA, and CI/CD-integrated security tooling. - Strong understanding of authentication, authorization, and cryptographic primitives. - Experience with cloud security and modern infrastructure controls. - Strong communication skills with technical and non-technical audiences. - Proficiency in at least one programming language for tooling and automation. - Experience working closely with engineering teams in an Agile environment. Preferred Qualifications - Industry certifications such as OSCP, OSCE, GWAPT, or CISSP. - Experience with offensive security tooling and red-team operations. - Bug bounty experience, public CVEs, or open-source security contributions. - Familiarity with AI/LLM application security considerations. - Exposure to regulated industries with strict compliance requirements. How to Apply Would you like to know more about this opportunity? For immediate consideration, please send your resume to [email protected] or contact us at (908) 676-4399. Learn more about Bright Vision Technologies at www.bvteck.com .
Related Guides
Related Categories
Related Job Pages
More Application Engineer Jobs
• Garantizar la alta disponibilidad, estabilidad y desempeño de aplicaciones y sistemas críticos. • Analizar incidentes y problemas identificando causas raíz y proponiendo soluciones definitivas o paliativas. • Supervisar infraestructura, microservicios, bases de datos y experiencia de usuario final mediante Dynatrace. • Configurar alertas inteligentes basadas en comportamiento y capacidades de Inteligencia Artificial para la detección temprana de incidentes. • Crear y mantener dashboards de monitoreo para visualizar flujos de datos, volumen de transacciones y estados de peticiones. • Monitorear patrones inusuales en registros de aplicaciones y servidores mediante Kibana y Elastic Search. • Vigilar la salud de aplicaciones móviles utilizando Firebase Crashlytics, identificando regresiones y errores en producción. • Actuar como soporte de tercer nivel, colaborando con equipos de Infraestructura, Redes, Operaciones y Desarrollo. • Proporcionar evidencia técnica mediante logs, métricas y trazas para acelerar la resolución de incidentes y despliegue de correcciones. • Colaborar con equipos Frontend, Backend, CRM y Product Teams para asegurar la estabilidad de los ecosistemas tecnológicos.
• Assist channel partners, consulting engineers, and contractors in proper selection and pricing of HVAC equipment • Provide commercial, competitive, and technical application support via phone or e-mail • Work with a small team of technical employees to resolve the field selling organization’s requests • Provide application training and support on a broad range of packaged and split commercial products • Participate in testing of applicable product selection and pricing software • Coordinate with engineering to develop Special Requests for unique requirements • Collaborate with marketing to develop selection and pricing software requirements
Role Description InterDent is seeking a detail-oriented and organized Application Processing Clerk to support the accurate and timely processing of applications, documentation, and related records. The successful candidate will be responsible for: - Receiving, reviewing, and processing incoming applications and supporting documentation. - Verifying applications for completeness, accuracy, and compliance with company requirements. - Entering and updating applicant information in company databases and tracking systems. - Maintaining organized electronic and physical filing systems. - Monitoring application status and ensuring timely processing and follow-up. - Communicating with applicants via email or other approved channels to obtain missing or corrected information. - Identifying discrepancies, errors, or incomplete submissions and escalating issues when necessary. - Maintaining accurate records of application activity and processing outcomes. - Assisting with document scanning, indexing, and record retention activities. - Supporting audits and quality assurance reviews by providing requested documentation. - Ensuring compliance with company policies, privacy standards, and data security requirements. - Performing other administrative and clerical duties as assigned. Qualifications - High school diploma or equivalent required. - Associate degree in Business Administration, Office Administration, or a related field preferred. - Previous experience in application processing, data entry, administrative support, records management, or a related role preferred. - Experience working with databases and electronic document management systems is an advantage. - Exceptional attention to detail and accuracy. - Strong organizational and time-management skills. - Proficiency in Microsoft Office Suite, including Word, Excel, Outlook, and Adobe Acrobat. - Excellent data entry and recordkeeping abilities. - Strong written and verbal communication skills. - Ability to maintain confidentiality and handle sensitive information professionally. - Ability to prioritize workload and meet deadlines. - Strong problem-solving and analytical skills. - Ability to work independently and collaboratively within a team environment.
Engineering Manager, Application Security
True AnomalySpace was once the quietest place in the universe. Now, it's crowded, contested, and confrontational. We are True Anomaly: the only defense company focused exclusively on space defense. Founded in 2022 by ex-U.S. Space Force members, True Anomaly designs and builds advanced systems for space superiority: agile and powerful spacecraft platforms, mission software engineered for unmatched command and control, and payloads tailored for precision sensing and effects. True Anomaly is headquartered in Centennial, CO, with regional offices in Colorado Springs, CO, Long Beach, CA, and Washington, D.C. We are hiring and seeking exceptional talent to join True Anomaly, from any technical industry or background, to bring unique talents, perspective, and solutions. If you embrace complexity, lead instead of follow, showcase integrity over ego, take ownership for outcomes, and measure success by impact, we want to hear from you.
Space is a warfighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it. OUR MISSION True Anomaly delivers decisive capabilities for space superiority. We build autonomous spacecraft, advanced payloads, mission software, and space-based interceptors — enabling the U.S. and its Allies to secure the space environment and counter threats from the ultimate high ground. OUR VALUES - Be the offset. We create asymmetric advantages with creativity and ingenuity. - What would it take? We challenge assumptions to deliver ambitious results. - It’s the people. Our team is our competitive advantage and we are better together. YOUR MISSION As the Application Security Engineering Manager, you will build and lead True Anomaly's application security team, focusing on securing the most critical software in our portfolio—flight software that operates on-orbit and command and control (C2) systems that enable mission success. This is a unique opportunity to shape the future of application security for national security space systems, building a team from the ground up while establishing the processes, tools, and culture that will secure our spacecraft and ground operations. In this role, you will have significant autonomy to recruit and develop a world-class application security team over the coming year. You will define application security strategy, integrate security throughout the software development lifecycle, and create the foundation for a security program that meets the unique demands of flight-critical and mission-critical systems operating in contested environments. This is an ideal role for a technical leader who thrives on building teams, wants to leave their mark on cutting-edge space technology, and is energized by the opportunity to solve challenging security problems at the intersection of embedded systems, real-time software, and cloud-based command and control. This position requires a minimum Secret clearance with strong preference for active TS/SCI clearance or the ability to obtain and maintain TS/SCI. RESPONSIBILITIES - Build, lead, and mentor an application security engineering team scaling to 10+ engineers over the next year, fostering a culture of technical excellence, collaboration, and mission focus - Define and execute application security strategy for flight software (FSW), ground command and control systems, mission planning applications, and supporting cloud infrastructure - Integrate security throughout the software development lifecycle (SDLC) for safety-critical embedded systems and distributed C2 applications, balancing security requirements with real-time performance and operational constraints - Establish and mature secure development practices including threat modeling, secure code review, static/dynamic analysis (SAST/DAST), software composition analysis (SCA), and security testing for both flight and ground software - Lead application security assessments and penetration testing efforts for spacecraft flight software, telemetry and command systems, and ground-based mission applications - Partner with spacecraft software engineers, ground systems developers, DevSecOps, and mission operations teams to embed security expertise across the engineering organization - Develop and enforce security standards, coding guidelines, and architectural patterns appropriate for resource-constrained embedded systems and high-assurance C2 applications - Drive remediation of security vulnerabilities and work with engineering leadership to prioritize security initiatives alongside feature development and mission timelines - Support compliance requirements including NIST 800-53, CMMC, FedRAMP, and other federal security frameworks applicable to national security space systems - Communicate application security posture, risks, and strategic initiatives to technical teams, engineering leadership, and executive stakeholders QUALIFICATIONS - 8+ years of hands-on experience in application security, secure software development, or related security engineering roles - 3+ years of people management experience, including hiring, coaching, performance management, and team development - Minimum Secret clearance required; active TS/SCI clearance strongly preferred - Proven experience building or significantly scaling application security programs and teams - Deep expertise in secure software development practices across multiple programming languages (C, C++, Rust, Python, Go, or similar) - Strong understanding of embedded systems security, real-time operating systems (RTOS), and resource-constrained environments - Experience with application security testing tools and methodologies including SAST, DAST, SCA, fuzzing, and penetration testing - Strong knowledge of common vulnerability classes (OWASP Top 10, CWE Top 25) and secure coding practices - Understanding of software supply chain security, dependency management, and build pipeline security - Familiarity with cloud application security in AWS, GCP, or Azure environments - Excellent leadership, communication, and stakeholder management skills - This position requires a minimum Secret clearance PREFERRED SKILLS AND EXPERIENCE - Active TS/SCI security clearance - Experience securing flight software, spacecraft systems, autonomous vehicles, or other safety-critical embedded platforms - Background in aerospace, defense, or national security software development - Familiarity with space system architectures including satellite operations, ground segments, and telemetry/command protocols - Experience with CMMC, FedRAMP, NIST 800-53, or RMF processes for DoD/IC systems - Experience with containerization security (Docker, Kubernetes) and Infrastructure-as-Code security - Understanding of cryptographic implementations and secure communications protocols - Relevant certifications such as CISSP, CSSLP, GWAPT, OSCP, or similar - Experience participating in or leading red team/purple team exercises - Prior experience in fast-paced startup or high-growth environments WORK ENVIRONMENT - Fast-paced, mission-critical environment supporting national security space operations where security decisions directly impact spacecraft and mission success - Requires building collaborative relationships across distributed engineering teams including flight software, ground systems, and mission operations - High degree of autonomy and ownership as the founding application security leader with direct impact on security strategy - Direct access to engineering and executive leadership with opportunity to shape both technical and organizational direction - May require occasional travel to government sites, integration facilities, or partner locations - Must be comfortable balancing team leadership responsibilities with hands-on technical contributions during team growth phase COMPENSATION - Colorado Base Salary: $175,000-$240,000 - California Base Salary: Long Beach - $180,000-$255,000, SF Bay Area - $200,000 to $275,000 - Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience. ADDITIONAL REQUIREMENTS - Work Location—this role is fully onsite at either our Centennial, CO, SF Bay Area, or Long Beach, CA locations with ~10-15% travel to other sites as needed. - Work environment—the work environment; temperature, noise level, inside or outside, or other factors that will affect the person's working conditions while performing the job. - Physical demands—the physical demands of the job, including bending, sitting, lifting and driving. This position will be open until it is successfully filled. To submit your application, please follow the directions below. #LI-Onsite To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us.


