Senior Security Engineering

The Senior Security Engineer designs, implements, operates, and continuously improves the security technologies and controls across applications and supporting platforms. Primary focus is Application Security -embedding security into the SDLC and CI/CD pipelines, strengthening web/API protections, and enabling proactive detection, while contributing broadly to Security Engineering capabilities (identity, cloud/onprem security platforms, logging/telemetry, and automation). The role partners closely with development, DevOps, and operations teams to build secure-by-default applications and services.
Develop and maintain software application security policies and procedures
Implement software application security controls
Partner with DevOps in developing a secure CI/CD pipeline
Design and operate web application firewall (WAF) and API protections; tune rules, reduce false positives, and automate policy updates
Identify application security vulnerabilities and issues, perform risk assessments and provide mitigations
Develop security monitoring for application stack
Conduct technical investigations of application security incidents
Interface with senior stakeholders across the IT leadership team to proactively interpret risks and priorities.
Support the diversity and inclusion strategy by following policies and procedures that ensure opportunities for employees and diverse business partners.
A minimum 6 to 8 years of experience in Application Security (designing, implementing, and operating security controls in enterprise application environments).
Hands-on experience with web application security, including OWASP Top 10 vulnerabilities
Hands-on experience with WAF/API security (policy design, rule tuning, automation), container security (runtime hardening, image scanning, vulnerability risk assessments)
Hands-on experience with conducting web application security scans, vulnerability assessments and/or penetration testing
Experience in operating on-prem or cloud-based security platforms
Ability to troubleshoot security and network-related issues and communicate technical findings effectively
Bachelor’s Degree in Information Security or Computer Science or Computer/Electrical Engineering, and/or equivalent field experience.