Cybersecurity Engineer III (AppSec)

Location: Remote, with the ability to work in an office or hybrid environment; Englewood or Lone Tree, Colorado, United States

Estimated starting salary: $131,010.00–$180,138.75 per year.

Company

hirify.global provides aerospace and national security technologies and transformative solutions for critical security needs.

What you will do

• Perform application security analysis using SAST, SCA, DAST, automated tooling, and source-code reviews; triage vulnerabilities and assess exploitability and risk.
• Review secure designs and security-control implementations, partnering with developers to integrate security into applications and systems.
• Integrate and maintain security tooling and gates in CI/CD workflows with DevOps engineers.
• Audit scan-tool and workflow configurations against enterprise security standards and improve security pipeline design.
• Advise on AI-augmented application security and other emerging AppSec capabilities.
• Act as a trusted security partner for development teams while supporting secure innovation and developer velocity.

Requirements

• Bachelor’s degree in Cybersecurity, Network Engineering, Information Technology, or a related engineering field, plus 5+ years of related experience. Relevant experience may substitute for the degree; without a degree, 9 years of related experience are required, and a higher relevant degree may substitute for experience.
• 3+ years focused on application security or DevOps/DevSecOps.
• Strong knowledge of secure software design and the system development lifecycle, including identity and access management, secrets management, integration security, encryption and data handling, audit logging and monitoring, and supply-chain security.
• Experience supporting the full system development lifecycle from planning and requirements through design, implementation, testing, deployment, and maintenance.
• Hands-on experience integrating security tools and requirements into CI/CD workflows, analyzing source code and tool outputs, evaluating exploitability and risk, and triaging findings.
• Strong understanding of secure coding and DevSecOps principles; working knowledge of NIST SP 800-171, NIST SP 800-218, and OWASP standards.
• Experience with security monitoring and assessment tools, networks, operating systems, applications, Microsoft platforms, domain structures, user authentication, digital signatures, and data-security administration.
• Ability to communicate and collaborate with development teams as a trusted security partner.
• Ability to obtain and maintain a Secret U.S. Security Clearance; U.S. citizenship is required for employment.

Nice to have

• Experience with SonarQube, Semgrep, Trivy, JFrog Xray, JFrog Artifactory, GitHub Actions, Terraform, or Ansible.
• Programming experience in C++, Python, or JavaScript.
• Experience designing and implementing Policy as Code.
• Understanding of Infrastructure as Code, Kubernetes, Docker, API management, and cloud-native application technologies.
• Understanding of AI system security and experience securing applications with AI components.

Culture & Benefits

• Full-time corporate role supporting strategic direction and business operations across the organization.
• Medical, dental, and vision plans; life insurance; and a 401(k) with a 150% match up to 6%.
• Three weeks of paid time off and tuition reimbursement.
• Desk-based computer work, occasional lifting of up to 20 pounds, and travel as needed.
• Application posting remains open for at least five days and may be extended according to business needs.