Application Security Engineer III (Cybersecurity)

Location: Onsite near Denver, CO or Long Beach, CA; significant work must be performed onsite.

Base salary: $145,000–$205,000 in Long Beach; $140,000–$195,000 in Denver.

Company

hirify.global builds autonomous spacecraft, advanced payloads, mission software, and space-based interceptors for space superiority and national security operations.

What you will do

• Create security architecture documentation and operational security guides for government authorization processes.
• Drive vulnerability management with 30-, 90-, and 180-day remediation SLAs based on severity.
• Perform security code reviews across Elixir, Python, C++, and JavaScript codebases.
• Manage security automation using SAST, SCA, and DAST tools, including CodeQL, Semgrep, and JFrog Xray.
• Partner with engineering teams to implement secure coding practices and deliver security training.
• Create application security incident response playbooks and evaluate third-party security solutions.

Requirements

• 3+ years of experience in application security, product security, or security engineering.
• Hands-on experience implementing security controls for NIST 800-171, NIST 800-53, FedRAMP, or CMMC.
• Ability to write production-quality code in at least one language such as Python, Rust, Elixir, or C++.
• Experience with cloud security; Azure is preferred, while AWS or GCP is acceptable.
• Understanding of threat modeling, risk assessment, OAuth2, JWT, RBAC, ABAC, cryptography, key management, defense-in-depth, and Zero Trust principles.
• Ability to collaborate with engineering teams to implement security controls without blocking delivery velocity.
• Eligible for DoD Secret or TS/SCI clearance.
• Must be a U.S. citizen, lawful permanent resident, protected individual, or eligible to obtain the authorizations required under U.S. ITAR regulations.

Nice to have

• Active TS/SCI clearance or ability to obtain and maintain a security clearance.
• Experience with NIST 800-171 Rev. 3 or NIST 800-53 implementation, including gap analysis, control implementation, and evidence collection.
• Experience with Department of Defense Impact Levels IL2–IL6 or STIGs.
• Familiarity with Elixir, Erlang, Phoenix, or functional programming ecosystems such as Scala, Haskell, F#, or OCaml.
• Experience with Azure Government Cloud or other FedRAMP-authorized cloud environments, and familiarity with Ghommit.
• DevSecOps or Platform Security Engineering experience, including GitOps, CI/CD security, infrastructure-as-code security, and Kubernetes security.
• Experience with incident response, detection engineering, SOAR integration, regulated industries, startups, or building processes from scratch.

Culture & Benefits

• Work on mission-critical space systems supporting national security operations.
• Company-paid medical, dental, and vision coverage with HSA/HRA options.
• Flexible Time Off for exempt employees or up to 25 accrued PTO days for non-exempt employees, plus 12 paid holidays, parental leave, and sick leave.
• 401(k), fitness reimbursement, equity participation, catered lunch and snacks for in-office employees.
• This is a full-time, onsite role; fixed-term and temporary roles are excluded.

Hiring process

• The position remains open until successfully filled.
• Applications must follow the stated submission directions and may be subject to third-party identity verification and fraud detection.