Application Security Engineer

D&H Distributing; Pennsylvania; On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Employee Stock Ownership Plan

401k

Paid Time Off

Medical Insurance

Dental Insurance

Vision Insurance

Gym Reimbursement

Work from Home Reimbursement

Tuition Assistance

Employee Purchase Program

Job summary

D&H Distributing, a long‑standing employee‑owned technology distributor in Pennsylvania, seeks a Cybersecurity Architect to safeguard systems, services, and infrastructure. You will apply secure SDLC practices, demonstrate programming language proficiency, and perform security‑driven code reviews.

The role emphasizes staying current with security standards, guiding PCI compliance efforts, and collaborating across IT and business teams to strengthen defenses.

Qualifications

• Familiarity with secure SDLC practices and security standards.
• Proficiency in at least one programming language.
• Experience conducting code reviews from a cybersecurity perspective.
• Knowledge of OWASP Top 10 and security best practices.
• Experience with OAuth and ADFS authentication.

Responsibilities

• Oversee security controls for the company with minimal oversight.
• Design and implement new security technologies with minimal oversight.
• Provide training to other team members with minimal oversight.
• Assist in developing new security features for the SIEM.
• Coordinate relations with business and IT staff.
• Support PCI compliance and vulnerability management program.

Skills

Secure SDLC

Programming languages

Code reviews

OWASP Top 10

OAuth/ADFS

NIST/CIS

PCI compliance

Vulnerability mgmt

Security teamwork

Education

Associates degree in Cybersecurity or related field

Bachelor's degree in Cybersecurity or related field

3-5 years cybersecurity experience

Certifications: CSSLP, CEH, CISSP, etc.

Job description

D&H is growing! Join 100+ year old Employee-Owned technology distributor, offering end-to-end solutions for today's resellers, retailers, and the clients they serve across the SMB and Consumer markets.

• We are empowered by our employee Co-Owners who provide the industry’s best service, and we promote a collaborative culture.
• We offer an Employee Stock Ownership Plan, 401k, Paid Time Off, Medical, Prescription, Dental and Vision benefits as well as Gym Reimbursement, Work from Home Reimbursement, Employee Purchase Program, Tuition Assistance and much more!
• As a D&H Co-Owner you receive numerous discounts on services.
• We feel strongly about giving back to the community and promoting sustainable, eco-friendly business practices.

Summary

Cybersecurity Architects’ are a group of professionals who ensure that systems, services, applications, and infrastructure work reliably and securely. The Cybersecurity Architect is expected to have a beginning to moderate understanding of complex IT systems and stay up to date with the latest security standards, systems, and authentication protocols, as well as best practice security products.

For this role, applicants should be proficient in assessing application security. This includes an understanding of the security software development lifecycle (SDLC), as well as being proficient in at least one programming language.

Essential Duties and Responsibilities:

Core Requirements:

• Familiarity with the secure SDLC
• Proficiency in at least one programming language
• Experience conducting code reviews from a cybersecurity perspective
• Familiarity with the OWASP Top 10 (e.g., XSS, CSRF, etc.)
• Experience with OAUTH and ADFS
• Experience conducting security assessments, including assessing the security of third-party vendors
• Stay up to date on the latest security and industry trends including their compliance requirements
• Maintain knowledge of cybersecurity frameworks such as NIST and CIS and other security technology by attending workshops and reviewing publications
• Responsible for overseeing the security controls for the company with minimal oversight
• Responsible for designing and implementing new security technologies with minimal oversight
• With minimal oversight, provide training to other members of the team
• With minimal oversight, maintain complex project tasks and interface with various teams
• Provide thoughts on and assist in developing new features to be added to the SIEM
• With oversight, identify and design new security policies for the organization
• With minimal oversight, assist in maintaining PCI compliance of the organization
• With minimal oversight, assist in the design and implementation of a vulnerability management program
• With minimal oversight, aid in the design, implementation, and enhancement of the security awareness program
• Effectively deal with rapid change in a positive manner
• Assist in process improvements to enhance the efficiency of current operational procedures
• Coordinate relations with and serve as a liaison between business and IT staff
• Assist in developing short-term and long-term department goals which support long-term strategic goals
• Ensure the coordination and communication of production changes
• Participate in all company/location driven communication efforts, including huddles, department meetings, and other related efforts
• Maintain a positive and professional working relationship with peers, management, support resources, and the community with a constant commitment to teamwork and exemplary customer service to present a professional image of D&H Distributing
• Perform all other duties as assigned by management in a professional and efficient manner

Preferred Skills:

• Proficiency in web development, .NET, and/or Java
• Familiarity with API security best practices
• Experience conducting code reviews from a cybersecurity perspective
• Ability to design and support the implementation of security as part of the continuous deployment process

Education and/or Experience

• Associates degree in Cybersecurity or similar area of study required or equivalent years of related work experience
• Bachelor’s degree in Cybersecurity or similar area of study preferred
• At least 3-5 years of experience in cybersecurity with application security preferred
• Industry certifications (CSSLP, CASE, CEH, Security+, CISSP, GWEB, , CCNA Security or similar) preferred
• Scripting experience in PowerShell, Python or Perl preferred