SciTec
Application Security Engineer
$102K–$157K
Boulder, Colorado · Full-time · Posted Oct 20, 2026
- Experience
- 2+ years of professional experience in cybersecurity or software development, or equivalent experience; 2+ years focused on application/software security.
- Education
- Bachelor’s degree, or equivalent experience.
- Visa sponsorship
- Applicants must be U.S. citizens.
About the job
Secures mission-critical software by analyzing and mitigating application vulnerabilities and integrating security into development and DevSecOps workflows.
What you'll do
- Perform automated and manual application security analysis, including source-code reviews, SAST, SCA, and fuzzing.
- Identify vulnerabilities, support remediation, and advise engineers on secure design and threat modeling.
- Integrate, maintain, and improve security tooling in CI/CD and DevSecOps pipelines; document findings and recommendations.
What they ask for
- Bachelor’s degree plus 2+ years of professional experience in cybersecurity or software development, or equivalent experience.
- 2+ years of experience focused on application/software security.
- Experience analyzing source code for security flaws and familiarity with secure software development practices.
- Ability to qualify for and maintain a DoD or DoE Secret security clearance and meet DoD 8140.01 Cyberspace Workforce Management requirements within six months of hire.
Nice to have
- Active DoD Secret clearance or higher; experience identifying, exploiting, and remediating application vulnerabilities; published CVEs.
- Programming or security-tool experience, including C++, Python, JavaScript, Rust, SAST/SCA tools, fuzzing frameworks, debugging, reverse engineering, threat modeling, or DevSecOps.
Pay
$102,000 - $157,000 / year (USD; base salary)
Tools
C++, Python, JavaScript, Rust, Coverity, Klocwork, SonarQube, AFL++
Model-written summary · the original posting is authoritative