The Nuclear Company
Staff Application Security Engineer
Washington, DC · Staff+
Sponsorship not specifiedDetected 36 days ago
Code ReviewGitAWSCI/CDPlatform EngineeringData EngineeringData ScienceCybersecurity
About the role
- The Nuclear Company is searching for an Application Security Engineer to help secure the software, data systems, and developer workflows that power our Nuclear Operating System, internal platforms, and mission-critical applications.
- This is a high-ownership role for a builder who is equally comfortable reviewing application architecture, threat modeling an API, improving GitHub security controls, and partnering directly with engineers to ship secure software quickly.
- This role reports to the Senior Manager for Application and Product Security.
Responsibilities
- Perform security reviews and threat models for NOS modules, internal tools, APIs, data workflows, AI-enabled features, and cloud-connected applications.
- Partner with engineering teams to identify and remediate risks across authentication, authorization, tenant isolation, input validation, secrets handling, encryption, logging, and data access.
- Review application designs and code changes for security issues before they become production risk.
- Help establish secure-by-default approaches for applications that support regulated, high-consequence infrastructure.
- Build and improve DevSecOps practices across the GitHub-based software development lifecycle, including code scanning, dependency review, secret scanning, branch protections, CI/CD hardening, and secure developer workflows.
- Partner with engineering teams to create paved roads: secure templates, checklists, automation, documentation, and lightweight review processes that help teams move faster with confidence.
- Develop pragmatic vulnerability management workflows, remediation guidance, and engineering-facing metrics.
- Collaborate with cloud and platform engineers to secure AWS workloads, infrastructure-as-code, service integrations, data pipelines, and deployment workflows.
Skills
- Help secure sensitive data flows across application, platform, and operational environments.
- Communicate risk clearly and practically, balancing security, delivery speed, product usability, and operational impact.
Benefits
- Support secure coding education through design reviews, office hours, documentation, and hands-on partnership with developers.
Apply directly at The Nuclear Company →Create a free account for alerts like thisView The Nuclear Company immigration profile
This listing is sourced directly from The Nuclear Company's careers page and normalized into a canonical job model.