Authority To Operate (ato) Engineer Jobs

1 job found

Today

Application Security Engineer

Firefly Aerospace Leander, TX

Leander, TX

Today

Full time Application Security Application Security Testing Application Security Testing

Apply Now

Job Description

Firefly Aerospace is building mission-critical capabilities for spacecraft operations, and the security of its ground software stack is central to that effort. In this onsite role in Leander, TX, you will help protect application systems that support spacecraft ground operations by designing and enforcing security controls end to end, from code practices to deployment and audits.

As an Application Security Engineer with 5+ years of experience, you will integrate security into development workflows, assess vulnerabilities using industry-standard tooling, and support government and national security requirements across classified and mission-critical environments.

Responsibilities

Design, implement, and maintain security controls for spacecraft ground software systems across front-end, back-end, databases, and cloud services.
Run software scanning, perform code reviews, and conduct vulnerability assessments using industry-standard tools and processes.
Define and enforce secure coding practices across development teams.
Integrate static and dynamic application security testing (SAST/DAST) into CI/CD pipelines.
Partner with developers to remediate vulnerabilities and design secure architectures.
Translate and implement government and national software security standards, including NIST and DoD STIGs.
Architect and maintain identity and access management (IAM), role-based access controls, and secure API authentication.
Collaborate with DevOps to deploy hardened software in containerized and cloud environments using Docker, Kubernetes, and AWS.
Support audits, security reviews, and Authority to Operate (ATO) processes for classified and mission-critical systems.

Requirements

BS in Computer Science, Software Engineering, Cybersecurity, or a related technical field.
5+ years of software engineering experience with a focus on application security.
Proficiency in modern programming frameworks including React, Node.js, and Python.
Hands-on experience with vulnerability scanning and application security testing tools such as SonarQube, Snyk, Fortify, Veracode, and OWASP ZAP.
Strong understanding of secure coding practices including OWASP Top 10 and CWE Top 25.
Knowledge of government and national security standards such as NIST 800-53, DoD STIGs, and FIPS 140-3.
Experience with container and cloud security including Docker, Kubernetes, AWS IAM, and Secrets Management.
Familiarity with CI/CD security integration.
Strong understanding of authentication and authorization, including correct encryption practices using vetted libraries, TLS, and secure secrets handling.
Experience working in high-reliability, safety-critical, or regulated environments.

Technologies

React, Node.js, Python
SonarQube, Snyk, Fortify, Veracode, OWASP ZAP
OWASP Top 10, CWE Top 25
NIST 800-53, DoD STIGs, FIPS 140-3
Docker, Kubernetes, AWS IAM, Secrets Management
CI/CD, SAST/DAST, TLS
Authority to Operate (ATO)

Benefits

Generous health, dental, and vision plans with low plan deductibles
Parental leave
Relocation benefits
Educational reimbursement
Short term disability
Flexible PTO options

Desired

Advanced degree or equivalent hands-on experience in a related technical field.
Experience deploying software to classified or government systems.
Prior involvement in achieving or maintaining an Authority to Operate (ATO).
Background in mission-critical or aerospace ground systems.
Hands-on experience supporting incident response from the remediation side, including root-cause analysis, coordinating fixes, and hardening.
Active security clearance (Secret or higher) or eligibility to obtain one.
Security certifications such as CISSP, CSSLP, CEH, or GIAC.

View full job page →

Get Authority To Operate (ato) Engineer Jobs alerts

New Authority To Operate (ato) Engineer Jobs, daily.