Application Security Engineer – Secure SDLC & SIEM

D&H Distributing; Harrisburg (Dauphin County); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Employee Stock Ownership Plan

401k

Paid Time Off

Healthcare benefits

Job summary

D&H Distributing, a long-standing employee-owned technology distributor, seeks a Cybersecurity Architect to safeguard systems and infrastructure. You will assess application security, contribute to SDLC security, and stay aligned with NIST and CIS standards while supporting security policy design.

The role requires hands-on experience in code reviews, vulnerability management, and cross-team collaboration to implement new security technologies with minimal oversight.

Qualifications

• Associates degree in Cybersecurity or similar area of study required or equivalent years of related work experience.
• Bachelor’s degree in Cybersecurity or similar area of study preferred.
• At least 3–5 years of experience in cybersecurity with application security preferred.

Responsibilities

• Familiarity with the secure SDLC and implementing security controls across applications.
• Conduct code reviews from a cybersecurity perspective and identify risks.
• Monitor and improve security measures including PCI compliance and vulnerability management.
• Stay current on security standards (NIST/CIS) and industry trends; support security policy design.

Skills

Web development

.NET

Java

Security assessments

OWASP Top 10

Education

Associates degree in Cybersecurity

Bachelor’s degree in Cybersecurity

Tools

PowerShell

Python

Perl

Job description

D&H Distributing, a long-standing employee-owned technology distributor, seeks a Cybersecurity Architect to safeguard systems and infrastructure. You will assess application security, contribute to SDLC security, and stay aligned with NIST and CIS standards while supporting security policy design.

The role requires hands-on experience in code reviews, vulnerability management, and cross-team collaboration to implement new security technologies with minimal oversight.