{"id":3771686,"url":"https://alion.io/job/true-anomaly-senior-application-security-engineer-2","title":"Senior Application Security Engineer","company":{"id":3381,"name":"True Anomaly","domain":"trueanomaly.space","url":"https://alion.io/company/true-anomaly","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":94,"open_postings":175,"ghost_share":0,"stale_share":0.04,"repost_share":0,"time_to_fill_p50_days":93,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Denver, United States","Long Beach, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":180000,"max":255000,"currency":"USD","period":"year","gross":null,"usd_annual":255000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"C++","optional":false},{"name":"CMMC","optional":false},{"name":"CodeQL","optional":false},{"name":"Defense in Depth","optional":false},{"name":"Elixir","optional":false},{"name":"FedRAMP","optional":false},{"name":"GCP","optional":false},{"name":"JavaScript","optional":false},{"name":"JFrog Xray","optional":false},{"name":"NIST 800-171","optional":false},{"name":"NIST 800-53","optional":false},{"name":"Python","optional":false},{"name":"Rust","optional":false},{"name":"Semgrep","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Zero Trust","optional":false},{"name":"Bicep","optional":true},{"name":"CI/CD","optional":true},{"name":"Erlang","optional":true},{"name":"F#","optional":true},{"name":"GitOps","optional":true},{"name":"Haskell","optional":true},{"name":"Kubernetes","optional":true},{"name":"OCaml","optional":true},{"name":"Pulumi","optional":true},{"name":"Scala","optional":true},{"name":"Service Mesh","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-11-04T17:10:15Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-05T13:20:02Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Space is a warfighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it.\nOUR MISSION\nTrue Anomaly delivers decisive capabilities for space superiority. We build autonomous spacecraft, advanced payloads, mission software, and space-based interceptors - enabling the U.S. and its Allies to secure the space environment and counter threats from the ultimate high ground.\nOUR VALUES\nBe the offset. We create asymmetric advantages with creativity and ingenuity.\nWhat would it take? We challenge assumptions to deliver ambitious results.\nIt’s the people. Our team is our competitive advantage and we are better together.\nBENEFITS & PERKS*\nBest-in-class healthcare: 100% company-paid medical, dental, and vision coverage for you and your dependents, with HSA/HRA options\n Generous time off: Flexible Time Off (FTO) for exempt employees, accrued PTO of up to 25 days for non-exempt employees, plus 12 paid holidays; Parental Leave; Sick Leave\nFuel for your day: Daily catered lunch and unlimited snacks for in-office employees\n And more: 401(k) retirement plan, fitness reimbursement, and Dog Fridays\n Equity participation: Equity is included as part of our total compensation package, giving you an opportunity to share in the company’s success.\n*Do not apply to fixed term and temporary roles\nYOUR MISSION\nAs a Senior Application Security Engineer, you will be instrumental in implementing and auditing security controls for mission-critical space systems that must meet stringent government compliance requirements. You will work at the intersection of security engineering, compliance frameworks (NIST 800-171/800-53), and modern cloud-native architectures to ensure our satellite mission control software and flight systems meet Department of Defense security standards.\nYou will design and implement application-level security controls including comprehensive audit logging, incident response capabilities, access controls, and security monitoring-all while working closely with product engineering teams to shift security to ensure optimal outcomes.\nIf you thrive in a fast-paced environment where you can build security controls from the ground up and see the direct impact of your work on national security space operations, this mission is for you.\nThis position requires the ability to obtain and maintain a security clearance.\nRESPONSIBILITIES\nCreate security architecture documentation and operational security guides for government authorization processes\nDrive vulnerability management program with defined SLAs for remediation (30/90/180 days by severity)\nPerform security code reviews for Elixir, Python, C++, and JavaScript codebases\nCollaborate in the triage and management of security automations using SAST (CodeQL, Semgrep), SCA (JFrog Xray), and DAST tools\nCollaborate with engineering teams to address security findings and implement secure coding practices\nDevelop and deliver security training to software engineers and systems administrators across the organization\nCreate and manage incident response playbooks specific to application security events\nEvaluate and integrate third-party security solutions to enhance overall security capabilities\nQUALIFICATIONS:\n5+ years of experience in application security, product security, or security engineering\nHands-on experience implementing security controls for compliance frameworks such as NIST 800-171, NIST 800-53, FedRAMP, or CMMC\nStrong software engineering skills with ability to write production-quality code in at least one language (Python, Rust, Elixir, C++, or similar)\nExperience with cloud security (Azure preferred, AWS or GCP acceptable)\nSolid understanding of secure architecture principles including:\nThreat modeling and risk assessment\nAuthentication and authorization patterns (OAuth2, JWT, RBAC, ABAC)\nCryptography and key management\nDefense-in-depth and Zero Trust principles\nProven ability to work collaboratively with engineering teams to implement security controls without blocking velocity\nEligible for DoD Secret or TS/SCI clearance\nPREFERRED SKILLS:\nActive TS/SCI clearance or ability to obtain and maintain a security clearance\nDirect experience with NIST 800-171 Rev 3 or NIST 800-53 implementation projects (gap analysis, control implementation, evidence collection)\nExperience with Department of Defense Impact Levels (IL2/IL4/IL5/IL6) or STIGs (Secure Technical Implementation Guides)\nFamiliarity with Elixir/Erlang/Phoenix or other functional programming ecosystems (Scala, Haskell, F#, OCaml)\nExperience with Azure Government Cloud or other FedRAMP-authorized cloud environments\nExperience using Ghommit tool\nBackground in DevSecOps or Platform Security Engineering:\nGitOps workflows and CI/CD security\nInfrastructure as Code security (Terraform, Bicep, Pulumi)\nKubernetes security (Pod Security Standards, network policies, service mesh)\nExperience with security incident response including detection engineering and SOAR integration\nFamiliarity with aerospace, defense, or other highly regulated industries (finance, healthcare, critical infrastructure)\nPrevious experience in startups or fast-paced environments with ability to build processes from scratch\nCOMPENSATION\nBase Salary: Long Beach - $180,000 to $255,000, Denver - $170,000 to $240,000\nEquity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave \nYour actual level and base salary will be determinedon a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience. \nADDITIONAL REQUIREMENTS\nWork Location -Successful candidates must be located near Denver or Long Beach. Significant work must be done on site. #LI-Onsite\nWork environment -the work environment; temperature, noise level, inside or outside, or other factors that will affect the person's working conditions while performing the job.\n Physical demands -the physical demands of the job, including bending, sitting, lifting and driving.\nThis position will be open until it is successfully filled. To submityour application, please follow the directions below.\nTo conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.\nTrue Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know.\nTo protect candidates and our company from application fraud and impersonation, we use third-party tools to verify applicant identity and detect fraudulent applications. Learn more in our Privacy Notice.","description_format":"text","description_chars":6947,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["401k plan","Equity","Flexible time off","Parental leave","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Satellite Manufacturing","Space Services","Space Defense"],"lifecycle":[{"event":"open","at":"2026-11-04T21:47:04Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":93,"reasons":["conf:3","velocity","win:early","comp:brand"],"computed_at":"2026-11-05T05:54:30Z"},"pay":{"stated_usd_annual":255000,"is_top_pay":true},"html_url":"https://alion.io/job/true-anomaly-senior-application-security-engineer-2","json_url":"https://alion.io/job/true-anomaly-senior-application-security-engineer-2.json","meta":{"generated_at":"2026-11-05T13:24:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17340,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3381},"rest":"https://alion.io/mcp/rest/get_company?id=3381"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftrue-anomaly-senior-application-security-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftrue-anomaly-senior-application-security-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftrue-anomaly-senior-application-security-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/true-anomaly-senior-application-security-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftrue-anomaly-senior-application-security-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3771686}},{"tool":"search_jobs","arguments":{"company":"trueanomaly.space","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3771686},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}