Cybersecurity Engineer IV – Application Security

Jobtailor; Illinois; On-site; USD 140,000 - 180,000; Full time

Job summary

Jobtailor in Illinois seeks an experienced Application Security professional to secure web and eCommerce apps, partner with software teams, and drive security within the SDLC. You will mentor developers on secure-by-design practices and oversee secure coding, SAST/DAST, and governance.

You will also integrate security into CI/CD pipelines, communicate risks to stakeholders, and collaborate with engineering to deliver secure software at scale.

Qualifications

• Must have strong Application Security experience and hands-on expertise.
• Deep understanding of the full SDLC including requirements, architecture, development, testing, deployment, and maintenance.
• Experience integrating security into software development and CI/CD pipelines.

Responsibilities

• Secure high-visibility web and eCommerce applications.
• Partner with software engineering teams throughout the SDLC.
• Drive Application Security and DevSecOps best practices.
• Integrate security across the SDLC.
• Identify, prioritize, and remediate vulnerabilities.
• Perform and support SAST and DAST testing.
• Review code and recommend security improvements.
• Promote secure coding, governance, and DevSecOps.
• Communicate risks to stakeholders and mentor teams on secure development.

Skills

Application Security

DevSecOps

SAST

DAST

CI/CD Integration

Vulnerability Management

Secure Coding

SDLC Understanding

Security Governance

Security Risk Communication

Education

Bachelor's degree (Information Security) +8 years

Master's degree (Information Security) +6 years

Tools

GitHub

Source Control Tools

Job description

• Secure high-visibility web and eCommerce applications.
• Partner with software engineering teams throughout the SDLC.
• Drive Application Security and DevSecOps best practices.
• Integrate security across the SDLC.
• Partner with developers to implement secure-by-design practices.
• Identify, prioritize, and remediate application vulnerabilities.
• Perform and support SAST and DAST testing.
• Review application code and recommend security improvements.
• Promote secure coding, security governance, and DevSecOps.
• Integrate security into CI/CD pipelines.
• Communicate security risks to technical and business stakeholders.
• Mentor development teams on secure software development.

Requirements

• Bachelor's degree with 8+ years of Information Security experience, or Master's degree with 6+ years of Information Security experience.
• Strong Application Security experience is required.
• Hands-on Application Security expertise.
• Strong understanding of the complete SDLC, including requirements, architecture, development, testing, deployment, production support, and maintenance.
• Experience integrating security into software development.
• Secure coding and Application Security Governance.
• Experience with SAST, DAST, vulnerability management, and remediation.
• Experience working directly with software development teams.
• Security integration within CI/CD pipelines.
• Experience with GitHub or similar source control tools.
• Excellent communication, collaboration, presentation, and stakeholder management skills.

Core Competencies

Demonstrates extensive expertise in Application Security, integrating security practices throughout the SDLC, and mentoring development teams on secure software development. Proficient in SAST, DAST, and vulnerability management, with strong communication skills to convey security risks to stakeholders.

Highest-signal resume keywords

• Application Security
• DevSecOps
• SAST
• DAST
• CI/CD Integration

ATS Optimization Keywords

Hard Skills

• Application Security Governance
• Vulnerability Management
• Secure Coding
• SDLC Understanding
• Security Risk Communication

Soft Skills

• Collaboration
• Presentation
• Stakeholder Management

Tools & Technologies

• GitHub
• Source Control Tools