Lead Application Security Engineer - AI & Cloud

RXO; Charlotte (NC); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health plans

401(k)

Pre-tax accounts

Insurance

EAP

Development programs

Paid time off

Job summary

RXO is seeking a Lead Engineer, Application Security to fortify and scale our security program across a multi-cloud environment. You’ll drive secure architecture, integrate security into the SDLC, and partner with engineering teams to remediate risks in modern cloud-native apps.

Based at RXO’s Charlotte headquarters with a four-day onsite schedule and remote Fridays, you’ll mentor developers, lead security reviews, and advance our security posture across Azure, GCP, and OCI.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field.
• 3+ years in Application Security, Security Engineering, DevSecOps, or a related discipline.
• Experience identifying and remediating security vulnerabilities within application code and software environments.
• Experience with Akamai App & API Protector, F5 Advanced WAF, or similar WAF platforms.
• Experience securing cloud-native workloads in Azure, GCP, and OCI.
• Experience with CI/CD security integrations.

Responsibilities

• Lead the development and governance of application security standards, secure architecture principles, and threat modeling.
• Conduct security assessments and threat modeling for emerging technologies including AI/LLMs.
• Analyze and tune WAF configurations and review logs; implement approved rule exceptions.
• Integrate and optimize SAST, DAST, and SCA within CI/CD pipelines and DevSecOps.
• Partner with engineering teams to remediate vulnerabilities and guide secure coding.
• Lead security awareness initiatives and mentor developers.
• Perform application security reviews, risk identification, and remediation tracking.
• Evaluate cloud-native apps across Azure, GCP, and OCI to ensure security standards.
• Support security controls within development pipelines to prevent risky deployments.
• Drive continuous improvements to security processes and tooling.

Skills

Application Security

Security Engineering

DevSecOps

Threat Modeling

WAF Configuration

CI/CD Security

Cloud Security

Azure

GCP

OCI

Docker

Kubernetes

OWASP Top 10

Secure Coding

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering

Tools

Akamai App & API Protector

F5 Advanced WAF

SAST

DAST

SCA

Terraform

Ansible

Bicep

Job description

RXO is seeking a Lead Engineer, Application Security to fortify and scale our security program across a multi-cloud environment. You’ll drive secure architecture, integrate security into the SDLC, and partner with engineering teams to remediate risks in modern cloud-native apps.

Based at RXO’s Charlotte headquarters with a four-day onsite schedule and remote Fridays, you’ll mentor developers, lead security reviews, and advance our security posture across Azure, GCP, and OCI.