SciTec
Staff / Sr Staff Application Security Engineer
$98K–$146K
Boulder, Colorado +1 · Senior Staff · Full-time · Posted Jun 1, 2026
- Location
- Boulder, Colorado
Princeton, New Jersey - Experience
- 2+ years of professional experience in cybersecurity or software development, or equivalent experience; 2+ years focused on application/software security.
- Education
- Bachelor’s degree or equivalent experience.
- Visa sponsorship
- U.S. citizenship required; ability to qualify for and maintain a DoD or DoE Secret security clearance.
About the job
Secures mission-critical software by analyzing application vulnerabilities, integrating security tools into development pipelines, and helping engineering teams adopt secure design and remediation practices.
What you'll do
- Perform automated and manual application security analysis, including SAST, SCA, fuzzing, and code and design reviews.
- Integrate, maintain, and improve security tools in CI/CD and DevSecOps pipelines; tune tools to reduce false positives.
- Identify and help remediate vulnerabilities, support threat modeling and secure design reviews, and document recommendations.
What they ask for
- Bachelor’s degree plus 2+ years of professional experience in cybersecurity or software development, or equivalent experience.
- 2+ years of experience focused on application/software security.
- Experience analyzing source code for security flaws and familiarity with secure software development practices.
- Ability to qualify for and maintain a DoD or DoE Secret security clearance, and meet DoD 8140.01 Cyberspace Workforce Management requirements within six months of hire.
Nice to have
- Active DoD Secret clearance or higher; experience identifying, exploiting, and remediating application vulnerabilities; published CVEs.
- Experience with programming languages, security analysis tools, fuzzing frameworks, debugging or reverse-engineering tools, threat modeling, or DevSecOps/Agile environments.
Pay
USD 98,000 - USD 146,000 / year (base salary)
Tools
SAST, SCA, CI/CD, DevSecOps, C++, Python, JavaScript, Rust
Model-written summary · the original posting is authoritative