- Perform security analysis of software applications using both automated tooling (static code analysis, software composition analysis, fuzzing) and manual code and design review.
- Support integration of tools and processes into DevSecOps pipelines.
- Design, implement, and integrate improvements to SciTec's software analysis continuous integration tooling.
- Support software developers in remediating issues identified during code analysis.
- Support software developers in integrating security into system designs.
- Other duties as assigned.
- Six years of experience in cybersecurity or software development OR a Bachelor's degree and two years of experience OR a Master's degree.
- Either two years of experience (industry or open-source contributions) specifically focused on software security OR an academic thesis project (or equivalent) on software security topics.
- Candidate must be capable of qualifying for a SECRET DoD or DoE security clearance.
- Candidate must be capable of satisfying DoD M Information Assurance System Architect and Engineer Level 1 training requirements within six months of hire.
- Detail oriented
- Good verbal and written communication skills
- Experience identifying, exploiting, and remediating application vulnerabilities. Credit for pubished CVEs is a plus.
- Experience with one or more of the following programming languages: C++, Python, JavaScript (or TypeScript), Rust
- Experience with using and configuring static code analysis tooling (e.g. Coverity, Klockwork, SonarQube, etc.)
- Experience with using and configuring software composition analysis tooling (e.g. Sonatype, Anchore, Snyk, JFrog, XRay, etc.)
- Experience with vulnerability discovery using fuzzing (AFL, AFL++, honggfuzz, etc.)
- Experience with application debugging, runtime instrumentation (Strace, eBPF), and reverse engineering (Ghidra, IDA Pro)
- Familiarity with threat modeling tools such as the MITRE ATT&CK framework.
- Employee Stock Ownership Plan (ESOP)
- 3% Fully Vested Company 401K Contribution (no employee contribution required)
- 100% company paid HSA Medical insurance, with a choice of 2 buy-up options
- 80% company paid Dental insurance
- 100% company paid Vision insurance
- 100% company paid Life insurance
- 100% company paid Long-term Disability insurance
- 100% company paid Hospital Indemnity insurance
- Voluntary Accident and Critical Illness insurance
- Short-term Disability insurance
- Annual Profit-Sharing Plan
- Discretionary Performance Bonus
- Paid Parental Leave
- Generous Paid Time Off, including Holiday, Vacation, and Sick Pay
- Flexible Work Hours
-
Security Engineer
1 week ago
Horizon Ventures Applewood, United StatesThis is the work environment: · The position is located in the Applewood zSystem Administration & Processing Services team/workstream. Our task is to provide IBM zServer systems and central storage systems for DATEV. It is part of the IT infrastructure department. · Our activitie ...
-
Cyber Security Engineer with Security Clearance
4 hours ago
The Computer Merchant, Ltd. Boulder, United StatesJob Title: Cyber Security Engineer · Type: On-Site · Location: Boulder, CO Pay Rate Range*: $90/hour · (Range is dependent on experience, educational background, W2, and other factors) Job Description: · • Senior Cyber Security Engineer to join the Cyber Security Engineering team ...
-
Leidos Boulder, United StatesR Description Leidos is seeking a Network Security Engineer on the NOAA Cyber Security Center contract in Boulder, CO. or Fairmont, WV. This position will be part of a Network Security team which is part of a larger Enterprise Security Services (ESS) team. ESS is responsible for ...
-
Network Security Engineer
1 week ago
Leidos Inc Boulder, CO, United StatesDescription · Leidos is seeking a Network Security Engineer on the NOAA Cyber Security Center contract in Boulder, CO. or Fairmont, WV. This position will be part of a Network Security team which is part of a larger Enterprise Security Services (ESS) team. ESS is responsible for ...
-
Network Security Engineer
6 days ago
Leidos Boulder, United StatesDescription · Leidos is seeking a Network Security Engineer on the NOAA Cyber Security Center contract in Boulder, CO. or Fairmont, WV. This position will be part of a Network Security team which is part of a larger Enterprise Security Services (ESS) team. ESS is responsible for ...
-
Cyber Security Engineer
6 days ago
Motion Recruitment Boulder, United StatesTitle:Cyber Security Engineer · 12 month contract · Remote, Hybrid, or in office?100% Remote · Must Haves:Must have strong knowledge of IAM controls including SAML and OAUTH/OIDC authentication. · Must have elements of all three of the following in Architecture, Application S ...
-
Cyber Security Engineer
2 weeks ago
Motion Recruitment Partners LLC Boulder, United StatesCyber Security Engineer · Bolder, Colorado · **100% Remote** · Contract · $90/hr - $120/hr · **Title:** · + Cyber Security Engineer · + 12 month contract · **Remote, Hybrid, or in office?** · + 100% Remote · **Must Haves** : · + Must have strong knowledge of IAM controls includin ...
-
Cyber Security Engineer
2 weeks ago
Motion Recruitment Partners LLC Boulder, United StatesCyber Security Engineer · Bolder, Colorado · 100% Remote · Contract · $90/hr - $120/hr · Title: · Cyber Security Engineer · 12 month contract · Remote, Hybrid, or in office? · 100% Remote · Must Haves · : · Must have strong knowledge of IAM controls including SAML and ...
-
Application Security Engineer
1 week ago
SciTec Boulder, United StatesJob Description · Job DescriptionDescription: SciTec has been awarded multiple government contracts and is growing our creative team SciTec, Inc. is a dynamic small business with the mission to deliver advanced sensor data processing technologies and scientific instrumentation ca ...
-
RF Engineer with Security Clearance
4 hours ago
PlanIT Group LLC Boulder, United StatesPlanIT Group has an immediate need for a RF Engineer at a well-known defense contractor. Position requires a TS/SCI, (we can also hire the right person if they can get a clearance). This position is onsite and located in Boulder, CO. Candidate will support advanced technology-led ...
-
Systems Engineer with Security Clearance
4 hours ago
Belcan Boulder, United StatesPerform new server builds using a Chef and NIM based provisioning environment, and perform level 2 support for system configuration, setup, and requested baseline configuration changes. Duties may include scripting for optimizing IT environment, project management for defining an ...
-
Network Engineer with Security Clearance
2 weeks ago
Ennoble First Boulder, United StatesTitle Network Engineer Location: Boulder/Longmont CO Required Clearance: Secret, ability to upgrade to TS/SCI Employment Type: Full-Time Regular Shift: Day Travel: No Relocation Assistance: Yes We are Ennoble First. The people supporting and securing some of the most complex gove ...
-
Sr Product Security Engineer
1 week ago
Medtronic Boulder, United StatesBring your talents to an industry leader in medical technology and healthcare solutions – we're a market leader and growing every day. You can be proud to part of technologies that are rooted in our long history of mission-driven innovation. You will be empowered to shape your ow ...
-
RF Engineer with Security Clearance
4 hours ago
PlanIT Group LLC Boulder, United StatesEmbedded Software Engineer · Positions located in Boulder, CO or Albuquerque, NM or Las Cruces, NM PLANIT Group is a fast-growing global technology consulting firm dedicated to delivering innovative solutions to our clients that drive results. We collaborate with our partners and ...
-
PlanIT Group LLC Boulder, United StatesPlanIT Group has an immediate need for a Space Operations Engineer at a well-known defense contractor. Position requires a TS/SCI with CI Poly, (we can also hire the right person if they can get a clearance). This position is onsite and located in New Mexico. Candidate will suppo ...
-
Parsons Boulder, United StatesIn a world of possibilities, pursue one with endless opportunities. Imagine Next When it comes to what you want in your career, if you can imagine it, you can do it at Parsons. Imagine a career working with intelligent, diverse people sharing a common quest. Imagine a workplace w ...
-
Senior Information Systems Security Engineer
3 days ago
Parsons Company Boulder, United StatesIn a world of possibilities, pursue one with endless opportunities. Imagine Next · When it comes to what you want in your career, if you can imagine it, you can do it at Parsons. Imagine a career working with intelligent, diverse people sharing a common quest. Imagine a workplace ...
-
Anduril Industries Boulder, CO, United StatesAnduril Industries is a defense technology company with a mission to transform U.S · and allied military capabilities with advanced technology · By bringing the expertise, technology, and business model of the 21st century's most innovative companies to the defense industry, Andu ...
-
Anduril Industries Boulder, CO, United StatesAnduril Industries is a defense technology company with a mission to transform U.S · and allied military capabilities with advanced technology · By bringing the expertise, technology, and business model of the 21st century's most innovative companies to the defense industry, Andu ...
-
PlanIT Group LLC Boulder, United StatesSeeking an Embedded Software Engineer. Person can be located in either Albuquerque, NM or Boulder, CO or Las Cruces, NM PLANIT Group is a fast-growing global technology consulting firm dedicated to delivering innovative solutions to our clients that drive results. We collaborate ...
Application Security Engineer - Boulder, United States - SciTec
Description
: SciTec has been awarded multiple government contracts and is growing our creative team SciTec, Inc. is a dynamic small business with the mission to deliver advanced sensor data processing technologies and scientific instrumentation capabilities in support of National Security and Defense. We support customers throughout the Department of Defense and U.S. Government in building innovative new tools to deliver unique world-class data exploitation capabilities.SciTec has an immediate opportunity for a talented Application Security Engineer in our Boulder, CO office. The Application Security Engineer will support developers in designing, implementing, and verifying secure application environments.
Responsibilities
Requirements
Candidates who have an active DoD or DoE security clearance will be strongly preferred. In addition, we are seeking candidates who have any of the following skills or experiences:
*Resumes, Cover Letters, and Applications which are generated by AI will not be considered for employment.
Benefits
SciTec offers a highly competitive salary and benefits package, including:
The pay range for this position is $90,000 - $146,000/year. SciTec considers several factors when extending an offer of employment, including but not limited to the role and associated responsibilities, a candidate's work experience, education/training, and key skills. This is not a guarantee of compensation.
SciTec is committed to hiring and retaining a diverse workforce and is proud to be an Equal Opportunity/Affirmative Action employer.
Application Security Engineer professionals in Boulder
-
Will Brown
Mechanical Engineer
-
DAKSHA SINGHAL
Software Engineer