SciTec
Lead Application Security Engineer
$155K–$185K
Boulder, Colorado · Full-time · Posted Jul 20, 2026
- Experience
- 8+ years of professional experience in cybersecurity or software development, or equivalent experience; 2+ years focused on application/software security.
- Education
- Bachelor’s degree, or equivalent experience.
- Visa sponsorship
- All employees must be U.S. citizens; applicants who do not meet this requirement will not be considered.
About the job
Leads application security for mission-critical defense software, identifying and mitigating vulnerabilities and integrating security analysis into development pipelines.
What you'll do
- Lead application security analysis and a team supporting multiple programs, using automated and manual techniques.
- Integrate, maintain, and improve security tooling in CI/CD and DevSecOps pipelines; help teams understand findings and remediate vulnerabilities.
- Support threat modeling and secure design reviews, and document findings and recommendations.
What they ask for
- Bachelor’s degree plus 8+ years of professional experience in cybersecurity or software development, or equivalent experience.
- 2+ years of experience focused on application/software security, including source-code security analysis.
- Familiarity with secure software development practices and ability to qualify for and maintain a DoD Secret security clearance.
- Ability to meet DoD 8140.01 Cyberspace Workforce Management requirements within six months of hire.
Nice to have
- Active DoD Secret clearance or higher; experience identifying, exploiting, and remediating application vulnerabilities; published CVEs are a plus.
- Experience with programming languages, static and composition analysis tools, fuzzing, debugging or reverse engineering, threat modeling, or DevSecOps/Agile environments.
Pay
$155,000 - $185,000 / year (base salary)
Tools
C++, Python, JavaScript, Rust, Coverity, Klocwork, SonarQube, Snyk
Model-written summary · the original posting is authoritative