Senior Application Security Engineer, Slingshot Aerospace

• 5+ years of professional experience in application security, DevSecOps, or related engineering roles (7+ years preferred)
• Active Top Secret clearance (TS/SCI preferred) or ability to obtain
• U.S. Citizenship (no duals)
• Secure coding, code review, and AppSec pipeline integration
• Linux hardening, Kubernetes, Docker, and infrastructure as code (Terraform, Ansible, etc.)
• AppSec tooling such as SAST, DAST, SCA, IaC scanners, and secrets detection
• Proficiency in Python, Go, Bash, or YAML
• Familiarity with software supply chain security and modern DevSecOps practices
• Experience in air-gapped or enclave-based environments

Desirable

• At Slingshot Aerospace, we build space simulation and decision intelligence technologies that empower defense, intelligence, and commercial operators
• As a Senior Application Security Engineer, you’ll take ownership of securing the software, systems, and infrastructure that power real missions
• This is a hands-on role focused on secure coding, container hardening, and pipeline security
• You’ll work side-by-side with Software engineers, DevSecOps teams, and cyber SMEs to embed security into everything we build and deliver across cloud, hybrid, and classified environments
• Work with the Cyber SME, Software Engineers, and DevSecOps teams to embed security controls throughout build, deployment, and delivery lifecycles
• Lead application security engineering across Linux-based, containerized, and hybrid environments
• Integrate and manage AppSec tooling including SAST, DAST, SCA, IaC scanning, and SBOM validation
• Perform secure code reviews and threat modeling for cloud and classified systems
• Build and maintain secure baselines for containers, Kubernetes clusters, and OS images
• Implement hardening, identity, and access controls (RBAC, MFA, PAM) across cloud and on-prem platforms
• Strengthen software supply chain security including artifact signing and SBOM validation
• Collaborate across teams to automate security controls and improve visibility across builds and repositories
• Lead investigations, post-mortems, and remediation efforts for vulnerabilities or incidents
• Contribute to security architecture reviews and new program deployments