Application Security Engineer — Secure SDLC Champion

Conagra Brands; Omaha (NE); Hybrid; USD 74,000 - 109,000; Full time

Benefits offered by this job

Health insurance

401(k) match

Stock purchase plan

Tuition reimbursement

Career development

Paid time off

Parental leave

Flexible work schedules

Volunteer opportunities

Job summary

Conagra Brands is seeking an Application Security SME to design, implement, and maintain secure applications across the organization. You will embed security into the software development lifecycle, reduce risk, and advance the AppSec program through collaboration with development, platform, and cybersecurity teams.

You will lead secure coding practices, threat modeling, and vulnerability remediation across web, mobile, and API workloads, while supporting incident response and tool pilots.

Qualifications

• Bachelor’s degree in CS/InfoSec/Software Eng or equivalent.
• 3+ years IT/software eng experience with at least 2 years in app security.
• Hands-on with SAST, DAST, and SCA tools.
• Knowledge of OWASP Top 10 and ASVS.
• Experience reviewing code in Java, C#, Python, JavaScript, or TypeScript.
• Familiarity with Azure DevOps, GitHub Actions or Jenkins.
• Knowledge of common vulnerabilities and remediation.
• Experience with NIST CSF, NIST 800-53, CVSS, ISO 27001, ITIL.
• Cross-functional collaboration.
• Strong communication skills to explain technical topics to varied audiences.
• Certifications such as CISSP, GWAPT, OSCP, CSSLP, CEH are a plus.
• Experience with API security, containers/Kubernetes, IaC scanning, pentesting, bug bounty, CTF, or coordinated disclosure preferred.
• Willingness to travel up to 10%.

Responsibilities

• Integrate SAST/DAST/SCA tools within CI/CD pipelines.
• Perform threat modeling and secure design reviews for new apps, features, services and APIs.
• Triage and drive remediation of application vulnerabilities while monitoring SLAs and metrics.
• Coordinate secure code reviews and app/API penetration testing for high-risk systems.
• Manage open-source dependency risks and SBOM initiatives.
• Define, promote, and support secure coding standards and developer education.
• Partner with cloud/platform teams to secure web, mobile, API, containers, and cloud-native apps.
• Support security incident response activities for application-layer threats and remediation.
• Evaluate, pilot, and prove concepts for application security tools and technologies.
• Apply AS requirements to enterprise releases while escalating risks when appropriate.
• Support risk assessments and conformance with frameworks like OWASP ASVS and NIST.

Skills

Application security

Vulnerability management

Threat modeling

Secure coding

Cross-functional collaboration

Communication

Education

Bachelor's degree in Computer Science / Information Security / Software Engineering

Tools

SAST tools

DAST tools

SCA tools

Secrets scanning tools

Azure DevOps

GitHub Actions

Jenkins

Kubernetes

IaC scanning tools

Penetration testing tools

Job description

Conagra Brands is seeking an Application Security SME to design, implement, and maintain secure applications across the organization. You will embed security into the software development lifecycle, reduce risk, and advance the AppSec program through collaboration with development, platform, and cybersecurity teams.

You will lead secure coding practices, threat modeling, and vulnerability remediation across web, mobile, and API workloads, while supporting incident response and tool pilots.