Application Security Engineer: SDLC & Vulnerability Lead

Cybersecurity Jobs; Louisville (KY); On-site; USD 107,000 - 147,000; Full time

Job summary

Yum! Brands is seeking an Application Security Engineer to strengthen security across web, mobile, and restaurant technology environments in Louisville, KY.

You will identify, assess, prioritize, and remediate vulnerabilities while integrating security into the software development lifecycle. This role focuses on application security testing and scanning, continuous monitoring of emerging vulnerabilities, and clear risk communication to technical and non-technical stakeholders.

Qualifications

• Bachelor's degree and at least 4 years in cybersecurity or related field.
• Experience evaluating vulnerabilities for exploitability and risk.
• Experience communicating technical topics to mixed audiences.
• Familiarity with SSDLC and modern delivery methodologies.
• Knowledge of PCI DSS, GDPR, and CCPA.

Responsibilities

• Act as subject matter expert on application security for US teams and operate Yum! application security services.
• Identify, prioritize, and remediate vulnerabilities in web/mobile apps across Yum! systems.
• Review findings, coordinate with engineering teams, and analyze for root cause and remediation strategies.
• Maintain scan profiles across SAST/DAST/SCA/container/IaC, improve coverage.
• Partner with development teams to integrate security into the SDLC and release processes.
• Support awareness campaigns and adherence to Global Technology Risk Management standards.
• Monitor vulnerabilities and communicate recommendations to stakeholders.
• Coordinate with incident response to contain and remediate incidents.

Skills

Application security

Risk-based approach

Stakeholder communication

SSDLC familiarity

Compliance knowledge (PCI DSS, GDPR, C

Education

Bachelor's degree

Tools

SAST tooling

DAST tooling

SCA tooling

Container security tooling

IaC security tooling

Job description

Yum! Brands is seeking an Application Security Engineer to strengthen security across web, mobile, and restaurant technology environments in Louisville, KY.

You will identify, assess, prioritize, and remediate vulnerabilities while integrating security into the software development lifecycle. This role focuses on application security testing and scanning, continuous monitoring of emerging vulnerabilities, and clear risk communication to technical and non-technical stakeholders.