Senior Application Security Engineer
True Anomaly
<div class="content-intro"><p class="ms-outlook-mobile-reference-message">Space is a warfighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it.</p> <p class="ms-outlook-mobile-reference-message"><u>OUR MISSION</u></p> <p class="ms-outlook-mobile-reference-message">True Anomaly delivers decisive capabilities for space superiority. We build autonomous spacecraft, advanced payloads, mission software, and space-based interceptors — enabling the U.S. and its Allies to secure the space environment and counter threats from the ultimate high ground.</p> <p class="ms-outlook-mobile-reference-message"><u>OUR VALUES</u></p> <ul> <li class="ms-outlook-mobile-reference-message"><strong>Be the offset.</strong><span class="Apple-converted-space">&nbsp;</span>We create asymmetric advantages with creativity and ingenuity.</li> <li class="ms-outlook-mobile-reference-message"><strong>What would it take?</strong>&nbsp;We challenge assumptions to deliver ambitious results.</li> <li class="ms-outlook-mobile-reference-message"><strong>It’s the people.</strong>&nbsp;Our team is our competitive advantage and we are better together.</li> </ul></div><h2><span style="text-decoration: underline;">YOUR MISSION</span></h2> <p>As a Senior Application Security Engineer, you will be instrumental in implementing and auditing security controls for mission-critical space systems that must meet stringent government compliance requirements. You will work at the intersection of security engineering, compliance frameworks (NIST 800-171/800-53), and modern cloud-native architectures to ensure our satellite mission control software and flight systems meet Department of Defense security standards.</p> <p>You will design and implement application-level security controls including comprehensive audit logging, incident response capabilities, access controls, and security monitoring—all while working closely with product engineering teams to shift security to ensure optimal outcomes.</p> <p>If you thrive in a fast-paced environment where you can build security controls from the ground up and see the direct impact of your work on national security space operations, this mission is for you.</p> <p><em>This position requires the ability to obtain and maintain a security clearance.</em></p> <h2><span style="text-decoration: underline;">Responsibilities</span></h2> <ul> <li>Create security architecture documentation and operational security guides for government authorization processes</li> <li>Drive vulnerability management program with defined SLAs for remediation (30/90/180 days by severity)</li> <li>Perform security code reviews for Elixir, Python, C++, and JavaScript codebases</li> <li>Collaborate in the triage and management of security automations using SAST (CodeQL, Semgrep), SCA (JFrog Xray), and DAST tools</li> <li>Collaborate with engineering teams to address security findings and implement secure coding practices</li> <li>Develop and deliver security training to software engineers and systems administrators across the organization</li> <li>Create and manage incident response playbooks specific to application security events</li> <li>Evaluate and integrate third-party security solutions to enhance overall security capabilities</li> </ul> <h2><span style="text-decoration: underline;">Qualifications:</span></h2> <ul> <li>5+ years of experience in application sec