Application Security Engineer

Job Description We seek a highly motivated and experienced Application Security Engineer to join our growing security team. This role is highly technical and candidates must possess a solid understanding of the security and privacy of our company's applications and data. Summary The Application Security Engineer must understand development, coding, security engineering, and secure systems configurations. This position ensures that every step of the software development lifecycle (SDLC) follows security best practices. Conduct security assessments using SAST and DAST tools. Collaborate with software development teams to integrate security into the development life cycle. Conduct security assessments of web, mobile, and other applications, analyze results to identify vulnerabilities and provide guidance on remediation. Design and implement secure software development practices, including threat modeling, secure coding standards, and code review. Stay current with security threats, trends, and technologies, recommend new security controls. Conduct application security investigations and provide risk mitigation recommendations. Maintain security documentation and collaborate on security policies, procedures, and standards. Additional Responsibilities Performs other duties as assigned. Education Bachelor's degree in computer science, information security, or related field. Experience Five (5) years or more experience with OWASP, SAST, DAST, SCA, RASP and common security tools. Seven (7) years or more application security, security engineering, software development experience. Five (5) years or more strong understanding of web application security and common attack vectors. Five (5) years or more experience with secure coding practices, threat modeling, and SDLC methodologies. Five (5) years or more proven experience in diagnosing, isolating, resolving complex issues and recommending/implementing strategies. Five (5) years or more demonstrated experience with systems integration processes, methodology and tools. Seven (7) years or more development and scripting experience. Five (5) years or more professional application security role. Five (5) years or more experience with API and Web Security. Three (3) years or more experience with WAF or similar application security infrastructure a plus. Seven (7) years or more experience in integrating security in CI/CD, DevOps. Six (6) years or more experience process or operation management. Six (6) years or more experience Value Stream Mapping, Continuous Flow, Pull Replenishment and other process improvement experience. Skills Excellent communication skills, verbal and written, working effectively with cross‑functional teams. Ability to create and maintain professional relationships at all organization levels. Ability to work independently and as a team member. Self‑driven, flexible in fast‑paced environment. Capability for multi‑tasking, highly organized, with strong time management. Proficiency in at least one programming language (e.g., Python, .NET, JavaScript); .NET preferred. Proficiency in at least one common scripting language (e.g., PowerShell, Bash). Familiarity of NIST framework, PCI, ISO 27001, SOC, SOX, CCPA, GDPR and global regulations. CI/CD experience with Azure DevOps, Terraform, or other automation and integration technologies. Risk management findings, vulnerability prioritization, threat modeling, and mitigation strategy experience. Licenses CISSP, OSCP, CASE, or other industry‑leading certifications preferred. Travel 1‑10% Job Category Information Security Compensation Information Pay Type Salaried Pay Range Minimum: $110,000.00 Maximum: $130,000.00 Benefits Information Ryder offers comprehensive health and welfare benefits, including medical, prescription, dental, vision, life insurance and disability insurance options, paid time off for vacation, illness, bereavement, family and parental leave, and a tax‑advantaged 401(k) retirement savings plan. EEO Statement Ryder is proud to be an Equal Opportunity Employer and Drug‑Free workplace. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, gender identity, age, status as a protected veteran, among other things, or status as a qualified individual with disability. #J-18808-Ljbffr