Application Security and Infrastructure Protection Administrator

Job Details Job Location: VENU+ Corporate Office - Orlando, FL 32809 Position Type: Full Time Education Level: 4 Year Degree Travel Percentage: Negligible Job Shift: Day Job Category: Information Technology At VENU+, work feels like play - but with purpose. As the global leader in creating unforgettable guest experiences, we combine entertainment, gaming, souvenirs, mobility, and storage solutions to bring more excitement, engagement, and convenience to the world’s top destinations. From ScooterPals® Fur-Wheelers and claw machines to photo capture, arcade games, and smart lockers, our creative programs help venues operate more efficiently, elevate guest satisfaction, and increase revenue - all with ease. Guided by collaboration, innovation, and a passion for excellence, we empower our team members to grow, contribute, and make a meaningful impact. If you’re seeking a career that’s dynamic, rewarding, and full of opportunity, you’ll find it at VENU+. At VENU+, we believe great work deserves meaningful rewards. Our benefits are designed to support your health, financial security, and overall well-being - so you can thrive both personally and professionally: Benefits Available to Qualifying Full-Time and Part-Time Employees: Flexible Time Off - Paid time off that allows you to take the time off you need, along with paid holidays. Health & Wellness Coverage - Comprehensive medical, dental, and vision plans. Retirement Planning - 401(k) plan with 50% company match on the first 6% contributed, including Roth options And more!! Grow your career with great benefits—and even better people! Job Summary The Application Security Administrator is a hands-on individual contributor responsible for administering security controls that protect VENU+ applications, cloud platforms, infrastructure, data, and user access. This role partners with software development, IT operations, vendors, and business stakeholders to identify vulnerabilities, strengthen system configurations, support secure software delivery, maintain audit readiness, and respond to security events. The position has no direct reports and serves as a technical security resource across the technology lifecycle. Key Responsibilities Administer and monitor application, cloud, infrastructure, identity, endpoint, and data-protection security controls. Perform and coordinate vulnerability scanning, secure-configuration reviews, risk validation, remediation tracking, and closure verification across applications and infrastructure. Support application security testing through SAST, DAST, software composition analysis, dependency scanning, API testing, penetration-test coordination, and manual validation as appropriate. Partner with developers and technical teams to integrate security into requirements, design reviews, code-review practices, CI/CD pipelines, release processes, and production support. Review security findings, eliminate false positives, assign risk-based priorities, document recommended fixes, and verify remediation before closure. Apply and maintain security baselines using recognized practices such as OWASP, CIS Controls and Benchmarks, NIST guidance, and vendor hardening standards. Support identity and access administration, including role-based access, least privilege, privileged access, multifactor authentication, access reviews, and timely provisioning or deprovisioning. Monitor security alerts, logs, dashboards, and system health; investigate suspicious activity and participate in incident response, containment, recovery, root-cause analysis, and corrective-action tracking. Assist with cloud and SaaS security, patching, certificates, encryption, secrets protection, backup validation, recovery readiness, and remediation of unsupported or end-of-life technology. Maintain security procedures, runbooks, system and asset records, audit evidence, third-party risk documentation, exception records, metrics, status updates, and practical security guidance for technical and business teams. QualificationsQualifications Required Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent relevant practical experience. 4+ years of progressive experience in application security, cybersecurity administration, systems administration, cloud security, infrastructure security, or a closely related discipline. Hands-on experience identifying, assessing, prioritizing, and tracking application or infrastructure vulnerabilities through remediation. Working knowledge of secure software development practices, web and API security, common application weaknesses, authentication, authorization, encryption, and secrets management. Experience with Windows and/or Linux systems, cloud or SaaS platforms, identity and access management, logging and monitoring, endpoint controls, and network-security fundamentals. Experience with security tools such as SIEM, vulnerability-management platforms, EDR, DLP, CASB, WAF, or application-security testing tools; scripting or automation experience is preferred. Familiarity with NIST Cybersecurity Framework, CIS Controls, OWASP Top 10 and ASVS, SOC 2, PCI DSS, ISO 27001, privacy requirements, or related control frameworks; a relevant security certification is preferred. Strong communication, documentation, analytical, organizational, problem-solving, discretion, and follow-through skills, with the ability to manage multiple priorities and explain risk to technical and nontechnical stakeholders. Work Environment In-office. Occasional after-hours work may be required for production changes, urgent vulnerabilities, security incidents, maintenance, or recovery activities. #J-18808-Ljbffr VENUplus Inc.