Application Security Engineer — Secure SDLC & OWASP

D&H Distributing; Pennsylvania; On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Employee Stock Ownership Plan

401k

Paid Time Off

Medical Insurance

Dental Insurance

Vision Insurance

Gym Reimbursement

Work from Home Reimbursement

Tuition Assistance

Employee Purchase Program

Job summary

D&H Distributing, a long‑standing employee‑owned technology distributor in Pennsylvania, seeks a Cybersecurity Architect to safeguard systems, services, and infrastructure. You will apply secure SDLC practices, demonstrate programming language proficiency, and perform security‑driven code reviews.

The role emphasizes staying current with security standards, guiding PCI compliance efforts, and collaborating across IT and business teams to strengthen defenses.

Qualifications

• Familiarity with secure SDLC practices and security standards.
• Proficiency in at least one programming language.
• Experience conducting code reviews from a cybersecurity perspective.
• Knowledge of OWASP Top 10 and security best practices.
• Experience with OAuth and ADFS authentication.

Responsibilities

• Oversee security controls for the company with minimal oversight.
• Design and implement new security technologies with minimal oversight.
• Provide training to other team members with minimal oversight.
• Assist in developing new security features for the SIEM.
• Coordinate relations with business and IT staff.
• Support PCI compliance and vulnerability management program.

Skills

Secure SDLC

Programming languages

Code reviews

OWASP Top 10

OAuth/ADFS

NIST/CIS

PCI compliance

Vulnerability mgmt

Security teamwork

Education

Associates degree in Cybersecurity or related field

Bachelor's degree in Cybersecurity or related field

3-5 years cybersecurity experience

Certifications: CSSLP, CEH, CISSP, etc.

Job description

D&H Distributing, a long‑standing employee‑owned technology distributor in Pennsylvania, seeks a Cybersecurity Architect to safeguard systems, services, and infrastructure. You will apply secure SDLC practices, demonstrate programming language proficiency, and perform security‑driven code reviews.

The role emphasizes staying current with security standards, guiding PCI compliance efforts, and collaborating across IT and business teams to strengthen defenses.