Hybrid Application Security Engineer — 3 Days In Office

Georgia-Pacific LLC; Atlanta (GA); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Health savings account

Life insurance

Disability insurance

Retirement plan

Paid vacation

Educational assistance

Parental leave

Adoption assistance

Job summary

Georgia-Pacific LLC is seeking an Application Security Engineer to strengthen and expand our security posture across the software development lifecycle in Atlanta, GA. You will partner with development, engineering, product, and security teams within the GP Cyber Security Organization to drive risk‑based improvements and secure engineering practices.

Based at GP HQ on Peachtree St, this hybrid role requires three days in the office each week.

Qualifications

• Experience testing web applications using modern frameworks (React.js, Next.js, ASP.NET, .NET Framework).
• Experience analyzing code and prioritizing findings with SAST, SCA, DAST.
• Programming/scripting: Python, PowerShell, C#, Java; CI/CD, containers, microservices, infrastructure-as-code.

Responsibilities

• Embed security standards in development workflows.
• Identify web vulnerabilities, prioritize findings, and guide remediation.
• Deliver training on secure coding, threat modeling, and risk assessment.

Skills

Security testing

Vulnerability management

Programming languages

CI/CD

Cloud security

Cross-team collaboration

Legal work authorization

Tools

GHAS

Orca

SAST

SCA

DAST

Job description

Georgia-Pacific LLC is seeking an Application Security Engineer to strengthen and expand our security posture across the software development lifecycle in Atlanta, GA. You will partner with development, engineering, product, and security teams within the GP Cyber Security Organization to drive risk‑based improvements and secure engineering practices.

Based at GP HQ on Peachtree St, this hybrid role requires three days in the office each week.