SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Valar Atomics is building advanced nuclear power systems to unlock scalable, clean energy for industrial applications, hydrogen production, and next-generation manufacturing. The company is developing a pilot plant in Utah and operates under strict regulatory oversight from the Department of Energy, Nuclear Regulatory Commission, and CMMC 2.0 compliance frameworks.
As Senior Application Security Engineer, you will embed security directly into the software development lifecycle for custom applications handling Controlled Unclassified Information (CUI), ITAR-regulated data, and Unclassified Controlled Nuclear Information (UCNI). You'll partner closely with software engineering teams building applications and APIs primarily in Python and Java, deployed across AWS, Azure, Palantir Foundry, Kubernetes, and GitHub.
Key responsibilities include:
- Partner with software engineers throughout design, development, and deployment to identify and remediate security risks in applications processing CUI, ITAR, and UCNI data
- Perform threat modeling, secure architecture reviews, and design reviews for new features and services, with attention to data flows across AWS, Azure, and Palantir Foundry
- Conduct manual and tool-assisted secure code review of Python and Java codebases, identifying injection flaws, insecure deserialization, broken authentication/authorization, and cryptographic weaknesses
- Review and harden API design and implementation (REST/GraphQL), including authentication and authorization schemes (OAuth 2.0/OIDC, mTLS)
- Establish secure, compliant patterns for integrating AI tools (Claude, OpenAI) into engineering workflows without compromising data protection or regulatory obligations
- Ensure every system handling CUI/ITAR/UCNI meets DOE order requirements, 10 CFR 73.54, NRC Regulatory Guide 5.71, and CMMC 2.0 (NIST SP 800-171/800-172) controls by design
- Contribute lightweight security architecture guidance—reference patterns, boundary/trust-zone diagrams, and control mappings—to keep new systems aligned with broader security architecture
This is a fully on-site role at the Torrance, CA location. You will be the security subject-matter expert embedded with development teams, ensuring compliance and secure design patterns across the organization's technology infrastructure.
