Cybersecurity Engineer III – AppSec

Sierra Nevada Corporation

. Lead efforts in designing, testing, and implementing secure operating systems, networks, and security monitoring tools .

Posted 11/12/2026full-timeUnited StatesMid-LevelSenior💰 $131,010 - $180,139 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing secure operating systems and networks, with a strong focus on application security and DevSecOps practices. Proficient in integrating security tools into CI/CD workflows and conducting risk assessments while fostering collaboration with development teams.

Highest-signal resume keywords

Application Security AnalysisCI/CD Security IntegrationRisk Assessment and ManagementNIST SP 800-171 ComplianceDevSecOps Principles

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity PrinciplesSecure Coding PracticesSecurity Tool ConfigurationSource Code AnalysisData Security AdministrationIncident Response ManagementSecurity Monitoring ToolsExploitability EvaluationNetwork AdministrationOperating Systems Administration

Soft Skills

CollaborationCommunicationTrusted Security Partnership

Tools & Technologies

SonarQubeSemgrepTrivyJFrog XrayJFrog ArtifactoryGitHub ActionsTerraformAnsibleKubernetesDocker

Certifications & Qualifications

Secret U.S. Security Clearance

Industry Keywords

Application SecurityDevOpsDevSecOpsOWASP StandardsAI System SecurityPolicy as CodeInfrastructure as CodeUser AuthenticationDigital SignaturesSystem Development Lifecycle

Tech Stack

Tools & technologies

AnsibleCyber SecurityDockerJavaScriptKubernetesPythonTerraformC++

About the role

Key responsibilities & impact

Lead efforts in designing, testing, and implementing secure operating systems, networks, and security monitoring tools
Oversee IT security systems and manage incident responses
Conduct in-depth risk assessments and develop advanced security controls
Research, recommend, and integrate new security tools and technologies
Perform application security analysis using SAST, SCA, DAST, automated tooling, and code reviews
Review proposed designs for security control implementations and secure design
Work with developers to integrate security into system and application designs
Integrate and maintain automated security tooling and gates in CI/CD workflows
Audit security scan tools and workflow security gate configurations against enterprise standards
Support continuous improvement of tooling workflow design
Advise and support AI-augmented Application Security and emerging AppSec improvements
Foster a culture of security within development teams
Collaborate with development teams to support secure innovation while protecting developer velocity and business outcomes

Requirements

What you’ll need

Bachelor's degree in Cybersecurity, Network Engineering, Information Technology or related Engineering field of study
5+ years of experience in a related role
Relevant experience may substitute for the required educational qualifications; without a degree, 9 years of related experience is required
A higher-level relevant degree may substitute for experience
3+ years of experience focused on application security or DevOps/DevSecOps
Strong understanding of core cybersecurity principles for secure software design and the system development lifecycle
Experience supporting the system development lifecycle through planning, requirements, design, implementation, testing, deployment, and maintenance
Hands-on experience configuring and integrating security tools into CI/CD workflows
Hands-on experience analyzing source code and security tool outputs, evaluating exploitability and risk, and triaging findings
Strong understanding of secure coding practices and DevSecOps principles
Ability to communicate and collaborate with development teams as a trusted security partner
Working knowledge of NIST SP 800-171, NIST SP 800-218, and OWASP standards
Experience with security monitoring and assessment tools
Experience supporting, troubleshooting, and administering networks, operating systems, and applications
Advanced knowledge of data security administration principles, methods, and techniques
Strong knowledge and experience administering current Microsoft platforms
In-depth understanding of domain structures, user authentication, and digital signatures
Ability to obtain and maintain a Secret U.S. Security Clearance
U.S. Citizenship required for security clearance eligibility
Preferred: SonarQube, Semgrep, Trivy, JFrog Xray, JFrog Artifactory, GitHub Actions, Terraform, Ansible
Preferred: proficiency in C++, Python, or JavaScript
Preferred: Policy as Code, Infrastructure as Code, Kubernetes, Docker, API management, AI system security, and securing applications with AI components
Ability to work in an office or hybrid environment
Ability to lift up to 20 pounds occasionally
Ability to travel as needed

Benefits

Comp & perks

Medical, dental, and vision plans
401(k) with 150% match up to 6%
Life insurance
3 weeks paid time off
Tuition reimbursement