Application Security Engineer — Secure SDLC & Remediation

Georgia-Pacific LLC; Atlanta (GA); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401(k)

Job summary

Georgia-Pacific LLC is seeking an Application Security Engineer in Atlanta, GA. You will strengthen our application security posture, collaborate with development, engineering, and product teams across the SDLC, and influence security initiatives within the GP Cyber Security Organization.

The role focuses on maturing our security tooling, training developers in secure coding, and guiding risk-based security decisions. Hybrid work arrangement with in-office presence three days per week.

Qualifications

• Experience testing web apps with React.js, Next.js, ASP.NET and the .NET Framework.
• Experience analyzing code and prioritizing findings using SAST, SCA, and DAST for security vulnerabilities.
• Proficiency in programming/scripting languages (Python, PowerShell, C#, Java) and modern practices (CI/CD, containers, microservices, IaC).
• Experience securing AWS and/or Azure environments, IAM and security groups.

Responsibilities

• Embed security standards and best practices with development teams.
• Identify web app vulnerabilities, prioritize findings, and advise on mitigations.
• Deliver training on secure coding, threat modeling, and risk assessment.
• Mature and optimize Application Security Testing platforms (GHAS/Orca).
• Lead proactive code reviews and integrate Secure Development Lifecycle into processes.
• Provide expert guidance on industry standards (OWASP, CIS).
• Develop and maintain ongoing security assurance programs and monitoring scripts.

Skills

Web security

SAST

DAST

CI/CD

Cloud security

Python

PowerShell

C#

Team collaboration

Tools

GHAS

Orca

SAST tools

Job description

Georgia-Pacific LLC is seeking an Application Security Engineer in Atlanta, GA. You will strengthen our application security posture, collaborate with development, engineering, and product teams across the SDLC, and influence security initiatives within the GP Cyber Security Organization.

The role focuses on maturing our security tooling, training developers in secure coding, and guiding risk-based security decisions. Hybrid work arrangement with in-office presence three days per week.