Application Security Engineer: Secure DevOps & SDLC Expert

Wawa, Inc.; Middletown Township (PA); On-site; USD 120,000 - 170,000; Full time

Job summary

Wawa, Inc. is seeking an Application Security Engineer to operate, maintain, and improve its application security program across internally developed apps.

You will work with developers and product owners to secure the software throughout the SDLC and participate in threat modeling, testing, and vulnerability management. The role requires building and operating security tooling, automating processes, and delivering guidance to IT and business teams.

Qualifications

• Minimum 2 years of experience in a complex technology environment, applying application security engineering.
• Advanced knowledge of containers and container security.
• Solid knowledge of cloud technology and security.
• Solid knowledge of Java programming.
• Experience with reading and writing enterprise software.
• Experience preventing and remediating software security flaws in enterprise software.

Responsibilities

• Operate and support the Application Security Program to secure internally developed applications.
• Identify security threats and communicate solutions to developers and product owners.
• Maintain secure coding practices, policies, standards, and procedures.
• Test applications against security threats and vulnerabilities.
• Support vulnerability management and security incident response.
• Deliver security presentations to technical and non-technical audiences.
• Contribute to security reviews, penetration tests, and threat modeling.

Skills

Communication skills

Team collaboration

Problem solving

On-call readiness

Security awareness

Education

Degree in computer science

Security certification preferred

Tools

Java

Golang

React

Python

PowerShell

Unix shell

JavaScript

TypeScript

Job description

Wawa, Inc. is seeking an Application Security Engineer to operate, maintain, and improve its application security program across internally developed apps.

You will work with developers and product owners to secure the software throughout the SDLC and participate in threat modeling, testing, and vulnerability management. The role requires building and operating security tooling, automating processes, and delivering guidance to IT and business teams.