116 application security jobs at 43 companies in Arvada, CO

PromotedHiringCafe
Founding Backend / Infra Engineer
Cupertino, CA, US
$160k-$300k/yr On-SiteFull Time
HiringCafe
HiringCafe: Building a 100× better job search engine to take on Indeed and LinkedIn.
Own the crawlers, pipelines, and infrastructure powering a real-time job search engine. Strong Node.js and Python fundamentals; bonus points for security and reverse-engineering chops.
Node.js, Python, Elasticsearch, Redis
1mo
Save
Mark Applied
Hide
Sr. Application Security Engineer
Denver, Colorado, United States
$130k-$165k/yr HybridFull Time
Vertafore
VertaforeNYSE: ROP: Provides cloud-based software solutions for the insurance industry.
7+ YOE7+ years in application/product/cloud security; Bachelor's in relevant field or equivalent experience; hands-on experience with threat modeling, secure SDLC, vulnerability management, CI/CD security, cloud (AWS/Azure), API and AI security; strong communication skills.
SAST, DAST, SCA, IaC scanning, container scanning, API security testing, secrets scanning, AI runtime scanning, WAF, CNAPP, CSPM, CI/CD, SIEM, AWS, Azure, OWASP ASVS, NIST CSF, NIST SSDF, OWASP SAMM
3mo
Save
Mark Applied
Hide
Senior Application Security Engineer
Denver or Long Beach
$145k-$205k/yr HybridFull Time
True Anomaly
True Anomaly: Develops autonomous spacecraft and software for space security missions.
5+ YOE5+ years in application security; experience with NIST 800-171/800-53, FedRAMP or CMMC; code in Python/Elixir/C++/JS; cloud security (Azure/AWS/GCP); DoD clearance eligibility.
CodeQL, Semgrep, JFrog Xray, DAST tools, Terraform, Bicep, Pulumi, Kubernetes
6d
Save
Mark Applied
Hide
Senior Application Security Engineering Lead
Boulder, Colorado, United States
$155k-$185k/yr OnsiteFull Time
SciTec
SciTec: Provides advanced remote sensing and missile defense technology solutions.
8+ YOEBachelor's plus 8+ years cybersecurity/software experience (or equivalent), 2+ years application security, source-code analysis, secure SD practices, ability to obtain DoD Secret clearance and meet DoD 8140.01, strong communication and collaboration skills.
C++, Python, JavaScript, Rust, Coverity, Klocwork, SonarQube, Snyk, Sonatype, Anchore, JFrog Xray, AFL, AFL++, honggfuzz, strace, eBPF, Ghidra, IDA Pro, MITRE ATT&CK
6d
Save
Mark Applied
Hide
Security Specialist - Application Security
Pittsburgh or Phoenix or Lakewood or Birmingham or Strongsville or Farmers Branch
$91k-$186k/yr OnsiteFull Time
PNC Financial Services
PNC Financial ServicesNYSE: PNC: Provides banking, lending, and investment services to customers.
5+ YOEHands-on application security experience including threat modeling, remediation guidance for OWASP/API vulnerabilities, secure design/authentication, SAST/DAST/RASP and CI/CD knowledge; 5+ years' experience typically expected; strong communication skills.
OWASP, API Security, SAST, DAST, RASP, CI/CD, SD Elements, BSIMM, SAMM, AWS, Azure, GCP, Scrum, Kanban
1mo
Save
Mark Applied
Hide
Senior Application Security Engineer
Broomfield, Colorado, United States
HybridFull Time
Recurly
Recurly: Automates subscription billing and management for recurring revenue businesses.
Experience developing in multiple languages, DevSecOps collaboration, managing bug bounty programs, integrating AI/ML into security pipelines, using SAST/DAST/SCA tools, Burp Suite, Terraform, Graylog, GCP, and Kubernetes.
Ruby, Go, Rust, JavaScript, Cloud Armor WAF, Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), Bug Bounty Programs, Containers, Git, Terraform, Graylog, GCP, Kubernetes, Burp Suite, AI/ML
6d
Save
Mark Applied
Hide
Senior Associate, Application Security, DevSecOps
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yr OnsiteFull Time
KPMG
KPMG: Global professional services network providing audit, tax, and advisory.
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
Java, C#, JavaScript, Python, SQL, CI/CD, SAST, DAST, Azure, OWASP
3d
Save
Mark Applied
Hide
Cloud Security Application Control Owner
Denver or Washington or Chicago
$92k-$145k/yr OnsiteFull Time
Bank of America
Bank of AmericaNYSE: BAC: Provides global banking, investing, and financial risk management services.
Experience with public cloud platforms (Azure, AWS, GCP), cloud security controls, application lifecycle governance, compliance tracking, Change/Incident/Problem management, and strong communication.
Azure, AWS, GCP, Jira, Confluence, ServiceNow, Horizon
1mo
Save
Mark Applied
Hide
Principal Application Security Architect - 861
Broomfield, Colorado, United States
$184k-$230k/yr OnsiteFull Time
Quantinuum
Quantinuum: Building full-stack quantum computing hardware and software systems.
10+ YOEBachelor's degree; 10+ years in app security; 5+ years software engineering; US person; security and compliance expertise.
SAST, DAST, CI/CD, OWASP Top 10, AWS, Azure, GCP, Python, Java, JavaScript, Go, Jenkins, Git
2mo
Save
Mark Applied
Hide
Oracle EPM Application Security & Access Management Lead
Fort Worth or Littleton or Marietta or Moorestown or Sunnyvale or California or Colorado or Georgia or New Jersey or Texas
$82k-$144k/yr RemoteFull Time
Lockheed Martin
Lockheed MartinNYSE: LMT: Designs and manufactures global security and aerospace systems.
Strong Oracle EPM security experience, capturing security requirements and translating to role design, leading role build/test/deploy/maintenance across SDLC, familiarity with Oracle EPM modules, strong communication and analytical skills; US Citizenship required.
Oracle EPM, Focused Build, Service Central, Jira
3mo
Save
Mark Applied
Hide
Application Support Analyst PA25Q4ASJH047
Denver, Colorado, United States
$50k-$55k/yr HybridFull Time
SS&C Technologies
SS&C TechnologiesNasdaq: SSNC: Provides software and technology for financial and healthcare sectors.
Experience in application support, databases/SQL, MQ, SWIFT, ISO15022/ISO20022, FIX, XML, and secure FTP; ITIL knowledge; bilingual English and Mandarin; client-facing in financial environment.
SQL, MQ, SWIFT, ISO15022, ISO20022, FIX, XML, secure FTP
1mo
Save
Mark Applied
Hide
Security Engineer
Denver, Colorado, United States
$115k-$130k/yr HybridFull Time
Ibotta
IbottaNYSE: IBTA: Provides a cash-back rewards and performance marketing platform.
4+ YOE4+ years in security engineering or application security; proficiency with Python/Go/Java, Docker/Kubernetes, AWS/GCP, Terraform, CI/CD and SAST/DAST/SCA tools; experience with threat modeling, bug bounty programs, and on-call incident response.
Python, Go, Java, Docker, Kubernetes, SAST, DAST, SCA, CI/CD, Terraform, AWS, GCP, OWASP Top 10
1mo
Save
Mark Applied
Hide
Staff Security Engineer
New York City or Denver or Dallas or Miami or United States
$169k-$210k/yr RemoteFull Time
Rightway
Rightway: Healthcare navigation and transparent pharmacy benefit management services.
8+ YOE8+ years security engineering experience across application and cloud security, strong AWS security and IaC knowledge, experience in regulated environments (healthcare), ability to read backend code (Ruby, Node.js, Java), and experience with AI/LLM security guidance.
AWS, Terraform, CI/CD, SAML 2.0, OAuth, OIDC, Ruby, Node.js, Java, OWASP Top 10 for LLM Applications, OWASP GenAI Security Project
5d
Save
Mark Applied
Hide
Security Officer (Taser)
Lakewood, Colorado, United States
OnsiteFull Time
Tarian Group
Tarian Group: Provides professional security guarding and integrated technology solutions.
High school diploma/GED, ability to obtain/maintain applicable security or TASER licenses/permits, valid driver’s license if applicable, strong vision, ability to lift and stand for shifts.
3w
Save
Mark Applied
Hide
Security Officer (Unarmed)
Aurora, Colorado, United States
$21/hr OnsiteFull Time, Part Time
Tarian Group
Tarian Group: Provides professional security guarding and protective services for critical infrastructure.
Security experience required; high school diploma/GED; valid Colorado driver’s license; ability to stand/walk shifts, lift up to 80 lbs., and obtain/maintain applicable security licenses.
1w
Save
Mark Applied
Hide
Security Officer
Lafayette, Colorado, United States
$20-$27/hr OnsiteFull Time
Intermountain Health
Intermountain Health: Operates hospitals and clinics providing comprehensive medical care services.
1+ YOEBLS required or obtainable within 90 days, valid driver’s license (if applicable), age 21+, security guard licensure required for Montana roles, preferred 1 year public safety or law enforcement experience.
HiredScore
2w
Save
Mark Applied
Hide
Armed Security Officer
Denver or Aurora
$26-$28/hr OnsiteFull Time
Afognak Native Corporation
Afognak Native Corporation: Provides professional government services, facility management, and defense solutions.
3+ YOEMust be ≥21, pass criminal background, complete ~80hrs training, possess state armed security license and concealed carry where applicable, have clean driving record, CPR/First Aid, and 3 years security experience or equivalent education/military/POST.
Microsoft applications, CCTV, electronic security applications
2mo
Save
Mark Applied
Hide
Senior Application Developer
Aurora, Colorado, United States
$85k-$95k/yr HybridFull Time
University of Colorado
University of Colorado: Public research university providing higher education and healthcare services.
2+ YOESenior developer for identity and access management; design, develop, and support secure, multi‑system web apps with identity/authentication integrations.
ASP.NET, NodeJS, MVC, TypeScript, Angular, Vue, React, MySQL, Oracle, MSSQL Server, Java, Python, Ruby, C#
2w
Save
Mark Applied
Hide
Product Security Engineer
Irvine or Newport Beach or Denver or Seattle or San Francisco
$185k-$220k/yr HybridFull Time
Compa
Compa: AI-powered compensation intelligence platform for enterprise teams.
5+ YOE5+ years software engineering experience, application and cloud security reviews, threat modeling, secure SDLC, cloud-native and IAM knowledge, strong systems thinking and communication skills.
AWS, SAML, SCIM, RBAC, CI/CD, IAM, infrastructure-as-code, containers
1mo
Save
Mark Applied
Hide
Information Security Architect
Woodbridge or New York City or Atlanta or Boston or Chicago or Dallas or Delaware or Denver or Garden City or Cayman Islands or Greenwich or Houston or Los Angeles or Miami or Naples or Nevada or Palm Beach or San Diego or San Francisco or Seattle or Stuart or Washington
$145k-$185k/yr HybridFull Time
Bessemer Trust
Bessemer Trust: Wealth management and family office services for affluent clients.
8+ YOEBachelor's degree and 8+ years of cybersecurity/security architecture experience. Deep technical expertise across cloud (AWS, Azure), identity, network, endpoint, application, AI, and data security; experience with Zero Trust, DevSecOps, and enterprise security tooling.
AWS, Microsoft Azure, Kubernetes, Infrastructure-as-Code (IaC), CSPM, CWPP, EDR/XDR, SIEM, DLP, CASB, PAM, ZTNA, Zero Trust, CI/CD, DevSecOps, SSO, MFA, RBAC, ABAC, API
5d
Save
Mark Applied
Hide
Intermediate Cyber Security Engineer
Cedar Rapids or Denver or Philadelphia
$70k-$84k/yr HybridFull Time
Transamerica
TransamericaNYSE: AEG: Provides insurance, retirement solutions, and investment products to customers.
1+ YOE1+ years cyber security engineering experience; knowledge of application security, vulnerability management, SDLC, and security frameworks; bachelor’s in related field or equivalent; certifications desirable (OSCP,CISSP,CEH,Security+/CySA/CASP).
NIST CSF, SIEM, Rapid7, ServiceNow Vulnerability Response (VR), Synk, CrowdStrike, ServiceNow, JIRA