Lead Application Security Engineer
Carter’s, Inc.
- # Lead Application Security EngineerApplylocations: Atlanta, GAtime type: Full timeposted on: Posted Todayjob requisition id: JR59478**Serving the needs of all families with young children,**Carter’s Inc. is the largest North American apparel retailer exclusively for babies and young children, encompassing Carter’s, OshKosh B’gosh, Skip\*Hop and Little Planet brands. Meaningful work, constant learning, genuine people, and a community guided by core values that promote inclusion and innovation is in everything we do. There are many reasons to build your career at Carter's.## How you’ll make an impact:The Lead Security Engineer – Application Security is a senior technical leader within the IT Security team, reporting to the Sr. Director, IT Security. This role serves as the primary architect and subject matter expert for application security across the enterprise, owning the AppSec program strategy, standards, and tooling roadmap. Working autonomously and with broad organizational influence, the Lead exercises expert-level judgment to define how security is built into software from the ground up. A critical distinction of this role is hands-on experience with artificial intelligence: the Lead is expected to build, secure, and govern AI-powered capabilities as they become embedded in Carter’s applications and infrastructure. The Lead acts as a force multiplier – elevating the security posture of every engineering team they engage with and translating complex risk into clear, actionable direction for both technical and business stakeholders. **Key Responsibilities**Depending on the needs of the department, the duties of this role could include: * **Application security, architecture & standards (25%)** + Defining and owning the enterprise application security architecture, standards, and secure-by-default patterns + Establishing and maintaining AppSec tooling strategy, evaluating vendors, and driving adoption across engineering teams + Leading threat modeling sessions for critical applications and new product features + Serving as the final technical authority on AppSec decisions, including security design reviews and architecture signoffs* **Secure code review, API security & advanced testing (25%)** + Conducting and directing advanced secure code reviews, SAST/DAST assessments, and manual penetration testing across web, mobile, and API surfaces + Owning API security standards including REST and GraphQL, enforcing OWASP API Top 10 controls and authentication/authorization design patterns + Driving vulnerability triage, risk prioritization, and remediation accountability across development teams at scale* **DevSecOps engineering & platform ownership (20%)** + Owning the DevSecOps toolchain: designing, deploying, and maturing security gates within CI/CD pipelines enterprise-wide + Acting as the primary security partner to engineering leadership, embedding security into system design, SDLC processes, and platform decisions + Driving continuous improvement of AppSec metrics, dashboards, and KPIs to demonstrate program maturity and risk reduction* **AI security – build, secure & govern (20%)** + Hands-on building and deploying AI-powered security tooling and automation (e.g., AI-assisted code review, threat detection, or vulnerability triage) + Securing AI/ML integrations and connectors: assessing prompt injection, data leakage, model supply chain, and third-party AI service risks + Developing and enforcing AI governance policies: defining acceptable use, security review gates, and risk acceptance criteria for AI adoption* **Risk governance, compliance & cross-functional leadership (10%)** + Representing the IT Security team in architecture reviews, cross-functional planning, and executive risk reporting + Owning security policy and standards documentation relevant to application security, AI use, and API governance + Leading AppSec representation in PCI-DSS, NIST, and OWASP compliance audits and evidence collection## **Travel Requirements**Open-to-travel between various Carter's offices as needed## ## We’d Love to hear from you if: (Requirements section)**Must have:*** 5+ years of application security, software engineering, or secure code review experience* Strong proficiency in one or more languages (e.g., Python, Java, JavaScript, Go) with ability to perform in-depth code review and threat modeling.* Experience with SAST/DAST tooling (e.g., Snyk, SonarQube, Semgrep, Checkmarx, Burp Suite, OWASP ZAP) and ownership of AppSec program design.* Proven communication and presentation skill set abilities with multilevel stakeholders* Ability to meet deadlines and work with management across various disciplines* Proven collaborative experience with cross functional teams* Ability to perform on-call duties during off-hours and holidays* An adaptable and flexible attitude towards changing business needs**Preferred skills and experience:*** Bachelor’s degree in computer science or related field* Demonstrated experience leading or conducting red team, penetration testing, or adversarial simulation exercises.* Experience designing and scaling security observability pipelines, including log analysis and application-layer telemetry.* Working knowledge of PCI-DSS, NIST, OWASP, and other regulatory frameworks; experience representing security in audit and compliance reviews.* Proven experience securing cloud-native or hybrid-cloud application environments (AWS, Azure, or GCP).* Hands-on experience building, deploying, or integrating AI/ML-powered tools, combined with the ability to assess and govern their security posture (prompt injection, data leakage, model supply chain risks).* Proven ability to define and enforce security standards across engineering organizations; prior experience owning a security capability or domain.* Security+, ISC2 CC, CompTIA A+, CompTIA Network+, SSCP, CCT, GWEB, CSSLP, CEH, or OSCP certifications*Carters is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity, sexual orientation, national origin, genetics, disability, age, veteran status, or any other status protected by federal, state, or local law.*
- J-18808-Ljbffr Carter’s, Inc.
Vacancy posted 2 days ago
Similar jobs that could be interesting for youBased on the Lead Application Security Engineer in Atlanta, GA vacancy
$134.28k
...the system. Job Description: At Regions, the Cyber Security Engineer supports applicable services for cloud applications, infrastructure,... ...utilizing extensive experience and technical knowledge and may lead complex projects as necessary. Primary Responsibilities...SuggestedFull timeWork at officeRelocationVisa sponsorshipWork visaRelocation packageFlexible hours3 days per weekRegions Bank
Atlanta, GA5 days ago$88.3k - $110.4k
...the outdoors and a desire to protect it for future generations. Role Summary We are seeking an experienced Application Security Engineer to join our Enterprise Cybersecurity team as an application security engineer to support the broader application security...SuggestedFull timeContract workTemporary workPart timeLocal areaShift workRivian
Atlanta, GA3 days ago- Application Security Engineer (Middle) ID71671 Full time | AgileEngine | United States Posted On 06/18/2026 Job Information City Atlanta State/Province Georgia 30319 IT Services Job Description AgileEngine is an Inc. 5000 company that creates award-winning software...SuggestedFull timeWork at officeRemote workVisa sponsorshipWork visaFlexible hours
- Application Security Engineer (Senior) ID71672 Full time | AgileEngine | United States Posted On 06/18/2026 Job Information City Atlanta State/Province Georgia 30319 IT Services Job Description AgileEngine is an Inc. 5000 company that creates award-winning software...SuggestedFull timeWork at officeRemote workVisa sponsorshipWork visaFlexible hours
$88.3k - $110.4k
...shares a love of the outdoors and a desire to protect it for future generations. Role Summary We are seeking an experienced Application Security Engineer to join our Enterprise Cybersecurity team as an application security engineer to support the broader application...SuggestedFull timeTemporary workPart timeLocal areaShift work$110k
Job Description We seek a highly motivated and experienced Application Security Engineer to join our growing security team. This role is highly... ...experience. Licenses CISSP, OSCP, CASE, or other industry‑leading certifications preferred. Travel 1‑10% Job Category Information...Flexible hours- A leading logistics and transportation services company in Atlanta is looking for a highly motivated Application Security Engineer to bolster their security team. This role involves conducting security assessments, collaborating with development teams, and ensuring security...
$220k - $270k
Omnissa, LLC is seeking a Staff 2 Application Security Engineer in Atlanta, GA. You'll influence security architecture and drive best practices across our products, ensuring robust security measures throughout the development lifecycle. This senior role requires 12+ years...Flexible hours- AgileEngine, LLC. is seeking a Middle Application Security Engineer in Atlanta, GA. In this role, you'll execute hands-on DevSecOps tasks, integrate security gates into CI/CD pipelines, and collaborate with development teams by providing remediation guidance. The role requires...Remote jobFlexible hours
$220k - $270k
Application Security Engineer - Staff 2 | Atlanta, GA or Mountain View, CA Omnissa is the first AI-driven digital work platform, built to support... ...secure, work-from-anywhere experiences. We integrate industry-leading solutions—Unified Endpoint Management, Virtual Apps and...Temporary workWork experience placementWork at officeLocal areaRemote workVisa sponsorshipFlexible hoursShift work3 days per week- ...Fayette Chamber of Commerce is seeking a Cyber Security Engineer to provide expert support for cyber security... ...candidate will engage in protecting cloud applications and infrastructure. Key responsibilities include leading projects for security solutions, conducting vulnerability...
- Burns & McDonnell is seeking a Senior Protection Applications Engineer to manage diverse power system protection projects. The successful candidate will tackle complex engineering challenges, ensuring reliability and resiliency of the electric grid. The ideal applicant...
- ...and support capacity planning to optimize performance Conduct security checks, recovery drills, and compliance audits, implement... ...work with cross‑functional teams Required Skill and Experience Application Security Testing: Conduct SAST/SCA using GHAS and DAST using Burp...Full timeTemporary workRelocationShift work
- Application Security Engineer (Tech Lead) ID71666 Full time | AgileEngine | United States Posted On 06/18/2026 Job Information City Atlanta State/Province Georgia 30319 IT Services Job Description We are looking for a Tech Lead Application Security Engineer to serve...Full timeWork at officeRemote workVisa sponsorshipWork visaFlexible hoursShift work
- AgileEngine, LLC. is seeking a Tech Lead Application Security Engineer to lead a cross-functional pod across ASPM integrations and AI-enabled secure code scanning. This role demands deep expertise in Python and Java, alongside experience in managing distributed teams in...Remote jobFlexible hours
- Burns & McDonnell in Atlanta, Georgia, seeks an experienced engineer to lead power system protection applications. The role involves developing and evaluating project plans, performing power system studies, and providing technical guidance to teams. Candidates should have...
- ## Application EngineerApplylocations: Atlanta-GA-UStime type: Full timeposted on: Posted Todayjob requisition id: R26002712**Preferred... ...incident logs* Work closely with infrastructure, application, and security teams to support integrated system requirements* Participate...Contract workNight shift
HD Supply Canada, Inc
Atlanta, GA4 days ago - HD Supply Management, LLC (USA) in Atlanta is seeking a Software Developer to design and develop applications while performing testing and troubleshooting. The role involves documentation, unit testing, and improving IT applications. A Bachelor’s degree in information...Work at office
- Position Summary The Application Engineer serves as a key technical partner to the sales, costing,... ...sourcing, and commercial teams, helping to secure and grow business with our medical... ...feasibility and alignment with our capabilities. Lead DFM/DFX discussions with customers to...
- Dormont Manufacturing Co in Atlanta, Georgia is looking for an E-Discovery Application Administrator II to support a large federal agency. This role requires a dedicated professional with substantial programming experience to independently develop applications in a litigation...
$131k - $175k
Overview Rohde & Schwarz is seeking a highly motivated, result‑oriented EW/RADAR Application Engineer ideally based in or near Fort Walton Beach, FL or Atlanta, GA. As an Application Engineer, you’ll provide solutions to complex problems faced by engineers and scientists...Flexible hours$131k - $175k
A technology firm is seeking an Application Engineer specializing in EW/RADAR solutions in Atlanta, GA. This role involves offering technical support, conducting training sessions, and engaging with Aerospace & Defense clients. Candidates should have a B.S. in Electrical...- ...package designed to provide the security they need to enjoy life at... ...this position is to provide engineering support for all aspects of... ...design pressures for product application. Develops product... ...conditions and requirements. Leads the production of or produces...Contract workLocal areaImmediate startWork from home
- We are currently looking for a HealthShare Application Engineer for a 100% remote position on a large federal government project. In this role, you will support and maintain InterSystems HealthShare environments, healthcare interoperability solutions, middleware platforms...Remote job
$131k - $175k
Rohde & Schwarz is seeking an Application Engineer in Atlanta, GA or Fort Walton Beach, FL. This role involves providing technical support and solutions for EW/RADAR systems. You will work closely with sales and marketing teams and deliver training sessions to key customers...- Join our dynamic team an Application Design Engineer - MV Drives and be at the forefront of technical innovation and customer success! We're seeking... .... Care for Yourself and Your Family. We ensure you feel secure with benefits that help you and your family thrive:...Flexible hours
$131k - $175k
A leading technology firm is seeking an EW/RADAR Application Engineer to provide solutions for advanced systems. This role involves technical support and customer training, requiring a minimum of 3 years' experience in EW/RADAR and a B.S. in Electrical Engineering. Compensation...- A leading engineering firm in Atlanta is seeking a qualified engineer to provide support for product lines, ensuring functionality, quality, and cost-effectiveness. Candidates should have a Bachelor's degree in engineering and at least three years of relevant experience...
- Dormont Manufacturing Co is seeking a full-time Senior E-Discovery Application Administrator II in Atlanta, Georgia. The role involves developing and maintaining programs for litigation support applications and requires substantial programming experience in large-scale...Full time
- ...develop sophisticated Robotics and Vision applications quickly and easily Common uses include... .... Eureka’s customers include industry-leading companies such as Toyota, Honda, Denso,... ...Ventures. About this role As Application Engineer, your mission is to support the...Work experience placementWork at officeWorldwideWork visa
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Lead Application Security Engineer. Be the first to apply!
Related searches
- lead network engineer Atlanta, GA
- lead industrial engineer Atlanta, GA
- lead engineer Atlanta, GA
- lead system engineer Atlanta, GA
- lead infrastructure engineer Atlanta, GA
- lead automation engineer Atlanta, GA
- lead operating engineer Atlanta, GA
- technical application engineer Atlanta, GA
- application operations engineer Atlanta, GA
- application engineering manager Atlanta, GA