Secure Code Review

Secure Code Review Cybersecurity Jobs

3 jobs found

1d ago

Senior Application Security Engineer

True Anomaly Denver, CO

Denver, CO

1d ago

$180k - $240k/yr Full time Senior Application Security Application Security Engineering

Apply Now

Job Description

Context: True Anomaly is hiring a Senior Application Security Engineer to help secure mission-critical space systems and support government authorization requirements.

Responsibilities

Create security architecture documentation and operational security guides for government authorization processes
Lead a vulnerability management program with defined remediation SLAs by severity (30/90/180 days)
Conduct security code reviews across Elixir, Python, C++, and JavaScript codebases
Support triage and management of security automation using SAST (CodeQL, Semgrep), SCA (JFrog Xray), and DAST tooling
Partner with engineering teams to address security findings and apply secure coding practices
Develop and deliver security training for software engineers and systems administrators
Build and maintain application security incident response playbooks
Evaluate and integrate third-party security solutions to strengthen overall security capabilities

Requirements

5+ years experience in application security, product security, or security engineering
Hands-on experience implementing security controls aligned to compliance frameworks such as NIST 800-171, NIST 800-53, FedRAMP, or CMMC
Strong software engineering skills, with ability to write production-quality code in at least one language: Python, Rust, Elixir, C++, or similar
Experience with cloud security (with Azure preferred; AWS or GCP acceptable)
Knowledge of secure architecture principles, including threat modeling and risk assessment
Knowledge of authentication and authorization patterns: OAuth2, JWT, RBAC, ABAC
Knowledge of cryptography and key management
Knowledge of defense-in-depth and Zero Trust principles
Track record collaborating with engineering teams to implement controls without blocking velocity
Eligibility for DoD Secret or TS/SCI clearance

Technologies

NIST 800-171, NIST 800-53, FedRAMP, CMMC
Elixir, Python, C++, JavaScript, Rust
Azure (preferred), AWS, GCP
OAuth2, JWT, RBAC, ABAC
CodeQL, Semgrep, JFrog Xray, DAST
Zero Trust, Threat modeling

Preferred Skills

Active TS/SCI clearance or ability to obtain and maintain a security clearance
Direct experience with NIST 800-171 Rev 3 or NIST 800-53 implementation projects (gap analysis, control implementation, evidence collection)
Experience with Department of Defense Impact Levels (IL2/IL4/IL5/IL6) or STIGs (Secure Technical Implementation Guides)
Familiarity with Elixir/Erlang/Phoenix or other functional programming ecosystems (Scala, Haskell, F#, OCaml)
Experience with Azure Government Cloud or other FedRAMP-authorized cloud environments
Experience using Ghommit tool
Background in DevSecOps or Platform Security Engineering, including:
- GitOps workflows and CI/CD security
- Infrastructure as Code security (Terraform, Bicep, Pulumi)
- Kubernetes security (Pod Security Standards, network policies, service mesh)
Experience with security incident response, including detection engineering and SOAR integration
Familiarity with aerospace, defense, or other highly regulated industries (finance, healthcare, critical infrastructure)
Previous experience in startups or fast-paced environments, including ability to build processes from scratch

Benefits

Healthcare: 100% company-paid medical, dental, and vision coverage for you and your dependents, with HSA/HRA options
Time off: Flexible Time Off (FTO) for exempt employees; accrued PTO up to 25 days for non-exempt employees; plus 12 paid holidays; Parental Leave; Sick Leave
In-office perks: Daily catered lunch and unlimited snacks
Retirement and wellness: 401(k) retirement plan, fitness reimbursement, and Dog Fridays
Total compensation: Equity participation

Location

Denver, CO (onsite)
Work location note: candidates must be located near Denver or Long Beach; significant work is completed on site (#LI-Onsite)

Additional Information

Work environment details: temperature, noise level, inside or outside, and other factors affecting working conditions
Physical demands: bending, sitting, lifting, and driving
Export/ITAR citizenship requirement: to conform to U.S. Government space technology export regulations (including ITAR), candidates must be U.S. citizens, lawful permanent residents, protected individuals as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain required authorizations from the U.S. Department of State

Compensation: USD 180,000 - 240,000 per year

View full job page →

1mo ago

SecEng III, AppSec

Amazon.com Services LLC San Francisco, CA

San Francisco, CA

1mo ago Closed

$178k - $227k/yr Full time Application Security Cybersecurity Tools Engineer

This position is no longer accepting applications (closed Oct 31, 2026).

Job Description

Amazon.com Services LLC offers an Application Security role based in California (onsite), with a compensation range of USD 178,400 - 226,700 per yearly. The position supports secure engineering at scale through hands-on security work, automation, and collaboration with software teams, with sign-on payments, RSUs, comprehensive healthcare, and time off.

This SecEng III, AppSec opportunity is designed for experienced engineers with 8+ years in Application Security or Development, who want to improve outcomes by influencing how teams approach threat modeling, secure code review, and security design.

What you’ll do

Create, update, and maintain threat models across a wide variety of software projects.
Perform manual and automated secure code reviews, primarily using Java, Python, and JavaScript.
Build security automation tools to increase coverage and efficiency.
Conduct adversarial security analysis using innovative tools to strengthen and augment manual effort.
Support internal teams through security training and outreach.
Provide security architecture and design guidance to development partners.
Independently tackle security problems that require novel methods or approaches.
Help shape team and partner process, priorities, and choices to improve security outcomes.

Required qualifications

4+ years (non-internship) troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools.
5+ years identifying security issues and risks and developing mitigation plans.
4+ years (non-internship) scripting, programming, and security code review in common programming languages.
Knowledge of at least two of: Scala, Java, Python, C/C++, Go.
Experience (non-internship) identifying industry security vulnerabilities, attack patterns, and remediation techniques.
8+ years Application Security or Development experience.

Technologies you may use

Java, Python, JavaScript, Scala, C/C++, Go, command line tools, and service-oriented architectures (microservices) and web services.

Certifications listed for alignment include CCSP (Certified Cloud Security Professional), CEH (Certified Ethical Hacker), CFR (CyberSec First Responder), Cloud+, CySA+ (CompTIA Cybersecurity Analyst), GCED (GIAC Certified Enterprise Defender), GICSP (Global Industrial Cyber Security Professional), and PenTest+.

Preferred qualifications

Experience with security in service-oriented architectures/microservices and web services.
One or more: CCSP, CEH, CFR, Cloud+, CySA+, GCED, GICSP, or PenTest+.

Benefits

Sign-on payments and restricted stock units (RSUs)
Health insurance (medical, dental, vision, prescription)
Basic Life & AD&D insurance
Option for Supplemental life plans
EAP
Mental Health Support
Medical Advice Line
Flexible Spending Accounts
Adoption and Surrogacy Reimbursement coverage
401(k) matching
Paid time off
Parental leave

Application deadline: Oct 5, 2026

View full job page →

1mo ago

SecEng III, AppSec

Amazon.com Services LLC Seattle, WA

Seattle, WA

1mo ago Closed

$178k - $227k/yr Full time Ai Security Application Security Cloud Platforms

This position is no longer accepting applications (closed Oct 23, 2026).

Job Description

Amazon Stores is focused on keeping customers safe while shipping secure, reliable software at scale. In this role, you will work alongside software development teams to improve safety through secure code reviews, threat modeling, security automation, and clear security guidance. The team emphasizes inclusive culture, continuous learning, and work-life harmony.

How you’ll help keep customers safe

Create, update, and maintain threat models across a wide range of software projects
Conduct manual and automated secure code reviews, with primary focus on Java, Python, and JavaScript
Build security automation tools that reduce security friction for development teams
Perform adversarial security analysis using innovative tools to strengthen and augment manual efforts
Provide security training and outreach to internal development teams
Deliver security architecture and design guidance to support safer engineering choices
Independently solve security problems that call for novel methods or approaches
Influence team and partner process, priorities, and decisions to improve outcomes

What you’ll bring

5+ years of work identifying security issues and risks and developing mitigation plans
4+ years of non-internship experience troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools
4+ years of non-internship scripting, programming, and security code review in common programming languages
Knowledge of at least two of the following: Scala, Java, Python, C/C++, or Go
Non-internship experience identifying industry security vulnerabilities, attack patterns, and remediation techniques
4+ years experience in any combination of: application security frameworks, identity and access controls, incident response, mobile security, cloud computing and security, AI security, threat intelligence, and penetration testing
Experience with security in service-oriented architectures/microservices and web services

Compensation and location

Seattle, WA (onsite). Salary range: USD 178,400 - 226,700 per year.

Benefits

Sign-on payments and restricted stock units (RSUs)
Health insurance: medical, dental, vision, prescription
Basic Life & AD&D insurance and option for Supplemental life plans
EAP
Mental Health Support
Medical Advice Line
Flexible Spending Accounts
Adoption and Surrogacy Reimbursement coverage
401(k) matching
Paid time off
Parental leave

Team culture

Amazon Security values diverse experiences and encourages candidates to apply even if they do not meet every listed qualification. The team supports learning and curiosity through training and career growth, and prioritizes work-life harmony through investments in work-life balance.

View full job page →

Secure Code Review Cybersecurity Jobs

Senior Application Security Engineer

SecEng III, AppSec

SecEng III, AppSec

Get Secure Code Review Cybersecurity Jobs alerts