Hybrid Application Security Engineer - Secure SDLC Leader

Flint Hills Resources; Atlanta (GA); Híbrido; USD 120.000 - 160.000; Jornada completa

Descripción de la vacante

Georgia-Pacific is seeking an Application Security Engineer in Atlanta, GA, joining the GP Cyber Security Organization. The role focuses on strengthening our application security posture across the SDLC, collaborating with development, engineering, and product teams, and shaping security initiatives at scale.

Based in GP HQ with a hybrid work arrangement (three days in office weekly), you will drive vulnerability remediation, secure coding practices, and risk-based insights across enterprise

Formación

• Experience testing vulnerabilities in web applications using common frameworks (React, Next.js, ASP.NET, .NET).
• Experience analyzing code and prioritizing findings with SAST/SCA/DAST.
• Proficiency in Python, PowerShell, C#, Java; familiarity with CI/CD, containers, microservices, IaC.

Responsabilidades

• Embed security standards in development processes.
• Identify web vulnerabilities and guide remediation.
• Plan and manage tasks with strong organizational skills.
• Deliver training on secure coding, threat modeling, and risk assessment.
• Mature and use application security tooling to address findings and reduce false positives.
• Lead proactive code reviews and integrate SDLC security into engineering.

Conocimientos

Web app security

SAST/SCA/DAST

Programming: Python/PowerShell/C#/Java

CI/CD & containers

Cloud security (AWS/Azure)

Cross-team collaboration

Educación

Bachelor's degree in CS/InfoSec

Herramientas

GHAS/Orca tooling

Descripción del empleo

Georgia-Pacific is seeking an Application Security Engineer in Atlanta, GA, joining the GP Cyber Security Organization. The role focuses on strengthening our application security posture across the SDLC, collaborating with development, engineering, and product teams, and shaping security initiatives at scale.

Based in GP HQ with a hybrid work arrangement (three days in office weekly), you will drive vulnerability remediation, secure coding practices, and risk-based insights across enterprise