Application Security and Infrastructure Protection Administrator

VENUplus Inc.; Orlando, Northern (FL, KY); Hybrid; USD 90,000 - 130,000; Full time

Job summary

VENU+ is seeking an Application Security Administrator to protect applications, cloud platforms, infrastructure, data, and user access. This hands-on role partners with software development, IT operations, vendors, and stakeholders to identify vulnerabilities, strengthen configurations, support secure delivery, stay audit-ready, and respond to security events.

The role has no direct reports and serves as a technical security resource across the technology lifecycle, requiring the ability to

Qualifications

• Bachelor's degree or equivalent practical experience in cybersecurity/IT/CS.
• 4+ years in application security or related fields.
• Solid understanding of secure software development and common weaknesses.

Responsibilities

• Administer and monitor security controls across applications, cloud and data.
• Coordinate vulnerability scanning and remediation tracking.
• Support SAST/DAST and security testing and coordinate with teams.
• Partner with developers to integrate security into SDLC, CI/CD, and release processes.
• Review findings, eliminate false positives, and verify remediation.
• Apply baselines per OWASP, CIS, NIST and vendor standards.
• Support IAM, including MFA and access reviews.
• Monitor alerts and participate in incident response and root cause analysis.
• Maintain security runbooks and audit documentation.

Skills

Strong communication

Documentation

Analytical thinking

Organizational skills

Problem-solving

Discretion

Follow-through

Education

Bachelor's degree in Cybersecurity/IT/CS or related

Tools

SIEM

Vulnerability management

EDR

DLP

CASB

WAF

AppSec testing tools

Job description

Job Details

Job Location: VENU+ Corporate Office - Orlando, FL 32809

Position Type: Full Time

Education Level: 4 Year Degree

Travel Percentage: Negligible

Job Shift: Day

Job Category: Information Technology

At VENU+, work feels like play - but with purpose.

As the global leader in creating unforgettable guest experiences, we combine entertainment, gaming, souvenirs, mobility, and storage solutions to bring more excitement, engagement, and convenience to the world’s top destinations. From ScooterPals® Fur-Wheelers and claw machines to photo capture, arcade games, and smart lockers, our creative programs help venues operate more efficiently, elevate guest satisfaction, and increase revenue - all with ease. Guided by collaboration, innovation, and a passion for excellence, we empower our team members to grow, contribute, and make a meaningful impact.

If you’re seeking a career that’s dynamic, rewarding, and full of opportunity, you’ll find it at VENU+.

At VENU+, we believe great work deserves meaningful rewards. Our benefits are designed to support your health, financial security, and overall well-being - so you can thrive both personally and professionally:

Benefits Available to Qualifying Full-Time and Part-Time Employees:

• Flexible Time Off - Paid time off that allows you to take the time off you need, along with paid holidays.
• Health & Wellness Coverage - Comprehensive medical, dental, and vision plans.
• Retirement Planning - 401(k) plan with 50% company match on the first 6% contributed, including Roth options
• And more!!

Grow your career with great benefits—and even better people!

Job Summary

The Application Security Administrator is a hands-on individual contributor responsible for administering security controls that protect VENU+ applications, cloud platforms, infrastructure, data, and user access. This role partners with software development, IT operations, vendors, and business stakeholders to identify vulnerabilities, strengthen system configurations, support secure software delivery, maintain audit readiness, and respond to security events. The position has no direct reports and serves as a technical security resource across the technology lifecycle.

Key Responsibilities

• Administer and monitor application, cloud, infrastructure, identity, endpoint, and data-protection security controls.
• Perform and coordinate vulnerability scanning, secure-configuration reviews, risk validation, remediation tracking, and closure verification across applications and infrastructure.
• Support application security testing through SAST, DAST, software composition analysis, dependency scanning, API testing, penetration-test coordination, and manual validation as appropriate.
• Partner with developers and technical teams to integrate security into requirements, design reviews, code-review practices, CI/CD pipelines, release processes, and production support.
• Review security findings, eliminate false positives, assign risk-based priorities, document recommended fixes, and verify remediation before closure.
• Apply and maintain security baselines using recognized practices such as OWASP, CIS Controls and Benchmarks, NIST guidance, and vendor hardening standards.
• Support identity and access administration, including role-based access, least privilege, privileged access, multifactor authentication, access reviews, and timely provisioning or deprovisioning.
• Monitor security alerts, logs, dashboards, and system health; investigate suspicious activity and participate in incident response, containment, recovery, root-cause analysis, and corrective-action tracking.
• Assist with cloud and SaaS security, patching, certificates, encryption, secrets protection, backup validation, recovery readiness, and remediation of unsupported or end-of-life technology.
• Maintain security procedures, runbooks, system and asset records, audit evidence, third-party risk documentation, exception records, metrics, status updates, and practical security guidance for technical and business teams.

QualificationsQualifications Required

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent relevant practical experience.
• 4+ years of progressive experience in application security, cybersecurity administration, systems administration, cloud security, infrastructure security, or a closely related discipline.
• Hands-on experience identifying, assessing, prioritizing, and tracking application or infrastructure vulnerabilities through remediation.
• Working knowledge of secure software development practices, web and API security, common application weaknesses, authentication, authorization, encryption, and secrets management.
• Experience with Windows and/or Linux systems, cloud or SaaS platforms, identity and access management, logging and monitoring, endpoint controls, and network-security fundamentals.
• Experience with security tools such as SIEM, vulnerability-management platforms, EDR, DLP, CASB, WAF, or application-security testing tools; scripting or automation experience is preferred.
• Familiarity with NIST Cybersecurity Framework, CIS Controls, OWASP Top 10 and ASVS, SOC 2, PCI DSS, ISO 27001, privacy requirements, or related control frameworks; a relevant security certification is preferred.
• Strong communication, documentation, analytical, organizational, problem-solving, discretion, and follow-through skills, with the ability to manage multiple priorities and explain risk to technical and nontechnical stakeholders.

Work Environment

In-office. Occasional after-hours work may be required for production changes, urgent vulnerabilities, security incidents, maintenance, or recovery activities.