- Omaha, Nebraska, United States
- On-site
- Full-time · Senior
- $87K–$157K per year
- 4+ years
Lead application security engineering for defense sector projects, evaluating dependencies, risks, and vulnerabilities in modern web applications.
Compensation
Pay Range $87,100.00 - $157,450.00
Responsibilities
- Independently evaluate software dependencies, assess risk, approve or reject components, and document defensible technical decisions.
- Apply knowledge of SBOMs, transitive dependencies, component provenance, vulnerability intelligence, and artifact integrity to improve software supply chain security.
- Evaluate vulnerabilities in the context of actual application use, rather than relying solely on automated scan results or CVSS scores.
- Work directly with software engineers and DevSecOps teams to resolve security findings without unnecessarily impeding development velocity.
- Use Jira, Confluence, Nexus, Git, development operations, collaboration, and source control tools.
Requirements
- Bachelor’s degree with 4+ years of experience or a Master’s degree with 2+ years of experience
- Nice to have: US Citizen with an active TS/SCI security clearance
- Nice to have: Experience supporting application security activities within DoD, Intelligence Community
- Nice to have: Experience with modern software development (Java, Python, Javascript, Rust, etc.)
- Nice to have: Experience with SCA and vulnerability management tools such as Sonatype Nexus IQ, JFrog Xray, Black Duck, Snyk, Mend, Dependency-Track