Application Security Engineer II

YOUR MISSION

Software is the central nervous system for True Anomaly’s engineering and product thesis. Software bridges the gap between military objectives, theoretical astrodynamics and the human and autonomous control of spacecraft and ground systems in time and space. True Anomaly is seeking a highly experienced Continuous Monitoring Engineer with cloud certification compliance experience, to contribute to the continuing evolution of our complex spacecraft modeling and simulation software.   

You do not need to have experience building space ground systems or experience in aerospace. You’ll have ownership of challenging, greenfield problems and a chance to fundamentally impact the outcome of future conflict (and the future of the company), all while enjoying world-class benefits including platinum healthcare, flexible work hours/location, highly competitive compensation and a generous stock options package.  

RESPONSIBILITIES

• Develop, implement, and maintain continuous monitoring strategies for FedRAMP-compliant systems. 
• Conduct continuous control testing and verification in accordance with FedRAMP requirements. 
• Conduct regular security assessments, vulnerability scans, and risk assessments to identify and mitigate potential threats. 
• Monitor security controls to ensure compliance with FedRAMP, SOC 2, ISO 27001, and NIST standards. 
• Collaborate with cross-functional teams to ensure security measures are integrated into the system development lifecycle. 
• Support the maintenance the FedRAMP System Security Plan (SSP) and ensure all necessary documentation is up to date. 
• Monitor and analyze security logs from various sources (e.g., SIEMs, IDS/IPS) to identify suspicious activities and respond to security incidents. 
• Prepare and present reports on the security status and compliance posture to management and external auditors. 
• Assist in the development and maintenance of security policies, procedures, and guidelines. 
• Stay updated with the latest security trends, threats, and technology solutions. 
• Provide guidance and training to internal stakeholders on compliance and security best practices. 

QUALIFICATIONS

• Bachelor’s degree in Computer Science, Information Security, or equivalent professional experience. 
• Minimum of 3 years of experience in information security, with a focus on continuous monitoring and compliance. 
• Proficiency with security tools and technologies such as SIEM, IDS/IPS, vulnerability scanners, and endpoint protection. 
• In-depth knowledge and hands-on experience with FedRAMP, SOC 2, ISO 27001, and NIST frameworks. 
• Strong understanding of cloud security principles and best practices. 
• Excellent analytical, problem-solving, and communication skills. 
• Ability to work independently and collaboratively in a fast-paced environment. 
• Relevant certifications such as CISSP, CISM, CISA, or equivalents are highly desirable. 

PREFERRED SKILLS AND EXPERIENCE

• Experience with cloud platforms such as Azure, AWS, or Google Cloud. 
• Familiarity with developer security and security operations practices and tools. 
• Experience working with a FedRAMP-accredited 3PAO and civilian agencies. 
• Previous work with the Department of Defense Impact Levels 

COMPENSATION

• California Base Salary: $145,000-$195,000
• Colorado Base Salary: $125,000-$170,000
• Washington D.C. Base Salary: $130,000-$175,000
• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave 

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience. 

ADDITIONAL REQUIREMENTS

• Work Location—Successful candidates will be located near Denver, Colorado Springs, Long Beach, or Washington D.C. While we observe a hybrid work environment, some work must be done on site.
• Work environment—the work environment; temperature, noise level, inside or outside, or other factors that will affect the person's working conditions while performing the job.
• Physical demands—the physical demands of the job, including bending, sitting, lifting and driving.

This position will be open until it is successfully filled. To submit your application, please follow the directions below. #LI-Hybrid