Cybersecurity AppSec Engineer II: Secure Apps & APIs

CarMax Business Services

Richmond (VA)

On-site

USD 80,600 - 120,900

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Bonus and equity

Job summary

CarMax seeks a Cybersecurity Engineer II to enhance our application security program and protect our Fortune 100 brand. You’ll work with a collaborative team to tackle complex security challenges and support product innovation.

This on-site role at the West Creek campus emphasizes steady growth and a readiness to adapt in a fast-paced environment. The role requires a Bachelor’s degree in a related field and 2+ years in cybersecurity, with experience in DAST/SAST, container security, and cloud

Qualifications

Bachelor’s degree in CS, engineering, cybersecurity or related field, or equivalent experience.
Minimum 2 years of cybersecurity work experience with security responsibilities.
Experience with GitHub, Azure DevOps, and TeamCity.
Experience with public cloud platforms (Azure, AWS, GCP) and DevSecOps practices.
CISSP certification is a plus but not required.

Responsibilities

Implement, operate, and improve cybersecurity solutions across applications and containers.
Provide technical expertise on projects with application security implications.
Learn portfolio of cybersecurity capabilities and how they interconnect.
Drive tasks to completion with effective time management and cross-functional collaboration.