> Markdown version of [/jobs/ext/4366635-application-security-engineer-ground-software](https://www.wearedevelopers.com/jobs/ext/4366635-application-security-engineer-ground-software). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security Engineer - Ground Software

- **Company:** Firefly Aerospace
- **Location:** Leander, TX, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, User Authentication, Burp Suite, Cloud Computing, Cloud Computing Security, Code Review, Cyber Security, Computer Programming, Databases, Continuous Integration, DevOps, Federal Information Processing Standards (FIPS), Identity and Access Management, Information Systems Security Architecture Professional, Python (Programming Language), Key Management, Node.Js, Open Web Application Security, Cloud Services, Fortify (Software), Secure Coding, Software Engineering, Software Systems, SonarQube, Web Applications, Cloud Platform System, ReactJS, Sonatype, Software Security, Veracode, Backend, Kubernetes, Information Technology, Front End Software Development, Docker, Static Application Security Testing, Vulnerability Analysis, Dynamic Application Security Testing
- **Published:** October 19, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=c1b131466822a2a0

## About the Role

* BS in Computer Science, Software Engineering, Cybersecurity, or related technical field.
 * 5+ years of experience in software engineering with a focus on application security.
 * Proficiency in modern programming frameworks (React, Node.js, Python).
 * Hands-on experience with vulnerability scanning and application security testing tools (e.g., SonarQube, Snyk, Fortify, Veracode, OWASP ZAP).
 * Strong understanding of secure coding practices (OWASP Top 10, CWE Top 25).
 * Knowledge of government and national security standards (e.g., NIST 800-53, DoD STIGs, FIPS 140-3).
 * Experience with container and cloud security (Docker, Kubernetes, AWS IAM, Secrets Management).
 * Familiarity with CI/CD security integration
 * Strong understanding of authentication and authorization, with the ability to apply encryption correctly (vetted libraries, TLS, secrets handling).
 * Experience working in high-reliability, safety-critical, or regulated environments.

Desired:

 * Advanced degree or equivalent hands-on experience in a related technical field.
 * Experience deploying software to classified or government systems.
 * Prior involvement in achieving or maintaining an Authority to Operate (ATO).
 * Background in mission-critical or aerospace ground systems.
 * Hands-on experience supporting incident response from the remediation side with root-cause analysis, coordinating fixes, and hardening.
 * Active security clearance (Secret or higher) or eligibility to obtain one.
 * Security certifications such as CISSP, CSSLP, CEH, or GIAC.

## Description

As an Application Security Engineer at Firefly Aerospace, you will safeguard the mission-critical software systems that enable our spacecraft operations from the ground. You will bring full-stack engineering expertise together with deep knowledge of security practices to ensure our ground software and space assets remain resilient against threats.

In this role, you will design, implement, and enforce security policies, conduct vulnerability assessments, and integrate secure development practices across the ground software stack-including web applications, backend services, databases, and cloud infrastructure. You will collaborate closely with engineering, IT, and operations teams to embed security controls into every phase of the software lifecycle, ensuring Firefly missions remain safe and secure from pre-launch to lunar landing.

RESPONSIBILITIES

 * Design, implement, and maintain security controls for spacecraft ground software systems, spanning front-end, back-end, databases, and cloud services.
 * Perform software scanning, code reviews, and vulnerability assessments using industry-standard tools and processes.
 * Define and enforce secure coding practices across development teams.
 * Integrate static and dynamic application security testing (SAST/DAST) into CI/CD pipelines.
 * Collaborate with developers to remediate vulnerabilities and design secure architectures.
 * Translate and implement government and national software security standards (e.g., NIST, DoD STIGs).
 * Architect and maintain identity and access management (IAM), role-based access controls, and secure API authentication.
 * Work with DevOps to deploy hardened software in containerized and cloud environments (Docker, Kubernetes, AWS).
 * Support audits, security reviews, and Authority to Operate (ATO) processes for classified and mission-critical systems.