AppSec Security Engineer | Hybrid (VA)

Genworth; Richmond (VA); Hybrid; USD 78,000 - 117,000; Full time

Benefits offered by this job

Competitive compensation

Comprehensive healthcare coverage

401(k) with employer match

Tuition reimbursement

Paid time off and holidays

Wellness and caregiving support

Job summary

Genworth is seeking an Application Security Engineer to manage secure development across on-prem and cloud environments. You will deliver application security services, support internal partners, and ensure compliance with company standards.

A 3+ year background in security engineering and experience in DevSecOps are essential. The role offers a hybrid work arrangement with in-office days and remote days, and requires a degree in computer science or equivalent.

Qualifications

• 3+ years in an application security engineering role.
• Experience with DevSecOps and cloud security.
• Ability to lead projects and initiatives.
• Experience securing applications in cloud environments.
• Knowledge of SOC2, ISO 27001, NIST 800-53.
• Strong scripting or programming skills.
• Familiarity with HIPAA, PHI, PII and PCI compliance.

Responsibilities

• Assist with operation and maintenance of vulnerability scanning tools and AST platforms.
• Partner with development teams to identify and remediate vulnerabilities.
• Support security investigations and remediation activities.
• Administer security technologies and automation platforms day-to-day.
• Participate in security assessments, threat modeling, and risk reduction initiatives.
• Generate reports/dashboards showing security posture.
• Track KRIs and security scorecards.
• Serve as a point of contact for routine security inquiries and CI/CD security reviews.
• Evaluate and implement security tools, processes, and technologies.
• Support governance by assisting with security reviews and documentation.
• Learn secure coding principles and apply industry standards.

Skills

Vulnerability scanning

AST platforms

Cloud security tooling

Threat modeling

Project leadership

Risk assessment

Cloud platforms AWS/Azure/GCP

Infrastructure as Code

Policy as Code

Secure SDLC

Automation

Scripting languages

Penetration testing

HIPAA/PHI/PII/PCI

Education

Computer Science or similar degree

Job description

Genworth is seeking an Application Security Engineer to manage secure development across on-prem and cloud environments. You will deliver application security services, support internal partners, and ensure compliance with company standards.

A 3+ year background in security engineering and experience in DevSecOps are essential. The role offers a hybrid work arrangement with in-office days and remote days, and requires a degree in computer science or equivalent.