Application Security Engineer

Overview We seek a highly motivated and experienced Application Security Engineer to join our growing security team. This role is highly technical and requires a solid understanding of the security and privacy of our company’s applications and data. The engineer will ensure that every step of the software development lifecycle follows security best practices through assessments with SAST and DAST tools, source code review, threat modeling, and secure software development practices. They will identify vulnerabilities, implement fixes, collaborate with development teams, and stay current on security trends and technologies. Responsibilities Conduct security assessments of our applications using SAST and DAST methodologies. Collaborate with software development teams to integrate security into the development life cycle. Analyze assessment results to identify vulnerabilities and provide remediation guidance. Design and implement secure software development practices, including threat modeling, secure coding standards, and code review. Stay current with security threats, trends, and technologies, and recommend new security controls as needed. Conduct application security investigations and provide recommendations to mitigate risk. Maintain security documentation and collaborate on security policies, procedures, and standards. Perform other duties as assigned. Qualifications Education: Bachelor's degree in Computer Science, Information Security, or a related field. Experience: 5+ years with OWASP, SAST, DAST, SCA, RASP, and common security tools (required). 7+ years in application security, security engineering, software development, or a related field (required). 5+ years with secure coding practices, threat modeling, and SDLC methodologies (required). 5+ years diagnosing, isolating, and resolving complex issues, recommending strategies (required). 5+ years in systems integration, CI/CD, DevOps integration (required). 7+ years of development and scripting experience (required). 3+ years experience with WAF or similar application security infrastructure (preferred). 6+ years process or operation management and improvement experience (required). Skills: Excellent communication and cross‑functional collaboration. Ability to work independently and as part of a team. Proficiency in at least one programming language (e.g., Python, .NET, JavaScript) – .NET preferred. Proficiency in at least one scripting language (e.g., PowerShell, Bash). Expert knowledge of NIST, PCI, ISO 27001, SOC, SOX, CCPA, GDPR, and global regulations. Expert CI/CD experience with Azure DevOps, Terraform, or other automation tools. Advanced risk management, vulnerability prioritization, threat modeling, and mitigation strategy. Licenses: CISSP, OSCP, CASE, or other industry‑leading certifications (preferred). Travel: 1–10% Compensation Salaried: $110,000.00 – $130,000.00 annually. Eligible for annual bonus, commission, and/or long‑term incentive plan based on level and type. Benefits Ryder offers comprehensive health and welfare benefits, including medical, prescription, dental, vision, life insurance, disability insurance, paid time off for vacation, illness, bereavement, family, and parental leave, and a tax‑advantaged 401(k) retirement savings plan. Equal Opportunity Ryder is proud to be an Equal Opportunity Employer and drug‑free workplace. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, gender identity, age, status as a protected veteran, or status as a qualified individual with a disability. #J-18808-Ljbffr