Senior Application Security Engineering Lead

Summary

Application Security Engineer LeadSciTec, a wholly owned subsidiary of Firefly Aerospace, is a dynamic non-traditional defense contractor that delivers advanced technologies in support of U.S. National Security and Defense. For more than forty-five years, we have supported Department of Defense customers by developing innovative remote sensing algorithms, tools, and techniques to deliver world-class data exploitation capabilities supporting missile defense; intelligence, surveillance, & reconnaissance; space domain awareness; and aircraft survivability missions.SciTec has an immediate opportunity for a talented engineer to support our programs delivering Next-Generation Missile Warning software. This is a unique opportunity to join a business delivering core capabilities for National defense. You will work within a fast-paced team delivering end-to-end software processing of Overhead Persistent InfraRed (OPIR) sensor data for Missile Warning, Missile Defense, Battlespace Awareness, and Technical Intelligence.We are seeking an Application Security Engineer Lead to help secure mission-critical software systems by identifying, analyzing, and mitigating application-level vulnerabilities. This role focuses on hands-on security analysis, tooling integration, and working directly with software engineers to embed security into the development lifecycle.The ideal candidate combines strong technical security skills with the ability to collaborate effectively with developers in a DevSecOps environment.ResponsibilitiesPerform application security analysis using both automated and manual techniques, including:Static code analysis (SAST)Software composition analysis (SCA)FuzzingManual code and design reviewsLead an application security team in support of multiple programsIdentify, analyze, and help remediate application vulnerabilitiesSupport software engineers in integrating security considerations into system and application designsIntegrate and maintain application security tooling within CI/CD and DevSecOps pipelinesDesign, implement, and improve continuous integration security analysis toolingTune and maintain security tools to reduce false positives and improve signal qualityAssist development teams in understanding findings and implementing effective fixesSupport threat modeling and secure design reviewsStay current with emerging vulnerabilities, attack techniques, and mitigation strategiesDocument findings, recommendations, and best practicesPerform other duties as assigned

Job Description

Application Security Engineer LeadSciTec, a wholly owned subsidiary of Firefly Aerospace, is a dynamic non-traditional defense contractor that delivers advanced technologies in support of U.S. National Security and Defense. For more than forty-five years, we have supported Department of Defense customers by developing innovative remote sensing algorithms, tools, and techniques to deliver world-class data exploitation capabilities supporting missile defense; intelligence, surveillance, & reconnaissance; space domain awareness; and aircraft survivability missions.SciTec has an immediate opportunity for a talented engineer to support our programs delivering Next-Generation Missile Warning software. This is a unique opportunity to join a business delivering core capabilities for National defense. You will work within a fast-paced team delivering end-to-end software processing of Overhead Persistent InfraRed (OPIR) sensor data for Missile Warning, Missile Defense, Battlespace Awareness, and Technical Intelligence.We are seeking an Application Security Engineer Lead to help secure mission-critical software systems by identifying, analyzing, and mitigating application-level vulnerabilities. This role focuses on hands-on security analysis, tooling integration, and working directly with software engineers to embed security into the development lifecycle.The ideal candidate combines strong technical security skills with the ability to collaborate effectively with developers in a DevSecOps environment.ResponsibilitiesPerform application security analysis using both automated and manual techniques, including:Static code analysis (SAST)Software composition analysis (SCA)FuzzingManual code and design reviewsLead an application security team in support of multiple programsIdentify, analyze, and help remediate application vulnerabilitiesSupport software engineers in integrating security considerations into system and application designsIntegrate and maintain application security tooling within CI/CD and DevSecOps pipelinesDesign, implement, and improve continuous integration security analysis toolingTune and maintain security tools to reduce false positives and improve signal qualityAssist development teams in understanding findings and implementing effective fixesSupport threat modeling and secure design reviewsStay current with emerging vulnerabilities, attack techniques, and mitigation strategiesDocument findings, recommendations, and best practicesPerform other duties as assigned