AppSec Jobs

SMX Security Team

Open security roles at SMX, and what we know about the team behind them.

information technology & services · 2100 employees · 2 open roles. Updated October 15, 2026.

Open roles (2)

SMX

Senior Cloud (DevSecOPs) Developer (5424)

Security Intel
District Heights, Maryland, United Statesinformation technology & servicesPosted Date unknownVerified 3d ago

“SMX states a broad cybersecurity positioning focused on protecting data, applications, and people, emphasizing that...”

StackJenkins
View Job

SMX

DevSecOps Engineer (5470) (Boulder, CO) (Secret)

Security Intel
Boulder, Colorado, United Statesinformation technology & servicesPosted Date unknownVerified 3d ago

“SMX states a broad cybersecurity positioning focused on protecting data, applications, and people, emphasizing that...”

StackJenkins
View Job

Security at SMX

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

How they approach application security

  • SMX states a broad cybersecurity positioning focused on protecting data, applications, and people, emphasizing that securing these aspects is about more than just protecting critical assets.
  • They advertise 'world-class penetration (pen) testing' and advanced hunting capabilities.
  • SMX also offers security posture assessment and real-time monitoring.
  • Their solutions follow the NIST RMF framework for information security, and their Xshield™ product is listed on the FedRAMP Marketplace.
  • However, no explicit public mission statement for AppSec, verbatim quotes on their approach to developers (enablement vs. gatekeeping), or specific risk philosophy for AppSec were found.

The team

Information regarding the AppSec team's organizational structure, reporting lines, named public-facing leaders, and estimated team size is not publicly available.

What they're working on

SMX job postings reference DevSecOps and cloud security responsibilities, including roles like 'Azure DevSecOps Engineer' that involve building code pipelines, using automation tools such as Ansible, Jenkins, and Packer, and conducting security patching. However, no public evidence was found for a Security Champions program, specific shift-left implementations (like IDE plugins or pre-commit hooks), vulnerability management processes (SLAs, ticketing, MTTR targets), or a bug bounty program.