AppSec Engineer: Secure SDLC & Vulnerability Remediation

Yum! Brands; Louisville (KY); On-site; USD 107,000 - 147,000; Full time

Job summary

Yum! Brands seeks an Application Security Engineer to strengthen security across web, mobile, and restaurant tech. You will identify, prioritize, and remediate vulnerabilities, guide secure SDLC practices, and help manage SAST/DAST/SCA programs.

Collaboration with engineering, product, and security teams is essential. Expect active threat monitoring and risk communication across stakeholders. This role emphasizes securing supply chains, container security, and IaC tooling, with parity to

Qualifications

• Bachelor's degree and 4+ years in cybersecurity, software engineering, or app development.
• Experience evaluating vulnerabilities for exploitability and business risk.
• Ability to explain security concepts to technical and non-technical audiences.
• Knowledge of SSDLC practices and modern software delivery methods.
• Familiarity with PCI DSS, GDPR, and CCPA in testing/remediation.

Responsibilities

• Provide security guidance as a SME around application security and operate Yum! security services.
• Identify, prioritize, and remediate vulnerabilities in mobile and web apps across Yum! systems.
• Review findings, determine root cause, and communicate remediation strategies and timelines.
• Maintain scan profiles, policies for SAST/DAST/SCA, container security, IaC, and secrets detection.
• Integrate security into the SDLC, including secure coding and release processes.
• Run awareness campaigns to promote secure development practices.
• Monitor publicly disclosed vulnerabilities and communicate risks to stakeholders.
• Coordinate with incident response to contain and investigate application security incidents.

Skills

SSDLC knowledge

Vulnerability assessment

Effective communication

Threat modeling

Security governance

Education

Bachelor's degree in cybersecurity or related field

Tools

SAST

DAST

SCA

CI/CD tooling

Container security tooling

Job description

Yum! Brands seeks an Application Security Engineer to strengthen security across web, mobile, and restaurant tech. You will identify, prioritize, and remediate vulnerabilities, guide secure SDLC practices, and help manage SAST/DAST/SCA programs.

Collaboration with engineering, product, and security teams is essential. Expect active threat monitoring and risk communication across stakeholders. This role emphasizes securing supply chains, container security, and IaC tooling, with parity to