Lead Engineer, Information Security (Application Security)

Web:; Charlotte (NC); Hybrid; USD 150,000 - 200,000; Full time

Benefits offered by this job

Medical benefits

Dental & Vision

401(k) match

Pre-tax accounts

Disability & life insurance

EAP

PTO & holidays

Job summary

RXO is seeking a Lead Engineer, Application Security to strengthen and scale its security program across a multi-cloud environment. You will lead secure architecture, integrate security into the SDLC, and partner with engineering to remediate risks for cloud-native apps and AI initiatives.

The role involves mentoring teams, driving secure coding practices, and overseeing security tooling in CI/CD pipelines. On-site with Friday remote, based at RXO HQ in Charlotte, NC.

Qualifications

• Bachelor's degree in Cybersecurity, CS, IT, Engineering or equivalent.
• 3+ years in Application Security, DevSecOps, or related field.
• Experience with enterprise WAF platforms and cloud security.

Responsibilities

• Lead the development and governance of application security standards and threat modeling.
• Conduct security assessments for emerging technologies including AI solutions.
• Tune and optimize WAF configurations and integrate SAST/DAST/SA into CI/CD.
• Mentor developers and drive Security Champion programs across teams.

Skills

Application Security

WAF expertise

Cloud security

Docker & Kubernetes

CI/CD integration

Threat modeling

OWASP Top 10

Security tooling

Education

Bachelor's degree in Cybersecurity/CS/IT/Engineering

Tools

Akamai App & API Protector

F5 Advanced WAF

Azure/GCP/OCI security tools

Job description

Accelerate your career at RXORXO is a leading provider of transportation solutions. With cutting-edge technology at the center, we're revolutionizing the industry with our massive network and commitment to finding solutions for every challenge. We create more efficient ways for shippers and carriers to transport goods across North America.At RXO, we're looking for a Lead Engineer, Application Security to help strengthen and scale our application security program across a multi-cloud environment. In this role, you'll serve as a senior individual contributor responsible for driving secure application architecture, integrating security into the software development lifecycle, and partnering closely with engineering teams to identify and remediate security risks. You'll play a key role in securing modern cloud-native applications, supporting AI initiatives, and advancing our overall security posture.This position is based out of RXO headquarters located at 11215 N Community House Road, Charlotte, NC 28277 and follows a four-day onsite work schedule Monday through Thursday, with remote work on Fridays.What your day-to-day will look like:Lead the development and governance of application security standards, secure architecture principles, and threat modeling practices across the enterprise.Conduct security assessments and threat modeling for emerging technologies, including Agentic AI solutions, Large Language Models (LLMs), and autonomous AI workflows.Analyze and tune Web Application Firewall (WAF) configurations, includingIntegrate and optimize automated security tools, including SAST, DAST, and Software Composition Analysis (SCA), within CI/CD pipelines and DevSecOps processes.Partner with software engineering teams to identify vulnerabilities and provide code-level remediation guidance aligned with secure coding best practices.Lead and support security awareness initiatives, including mentoring developers and facilitating Security Champion programs across engineering teams.Perform application securityEvaluate cloud-native applications and services across Azure, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI) environments to ensure adherence to security standards.Support the implementation of security controls within development pipelines, including mechanisms to prevent deployments with unresolved critical or high-risk vulnerabilities.Drive continuous improvement initiatives to enhance application security processes, tooling, and developer enablement.At a minimum, you'll need:Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field, or equivalent combination of education and experience.3+ years of experience in Application Security, Security Engineering, DevSecOps, or a related cybersecurity discipline.Experience identifying and remediating security vulnerabilities within application code and software development environments.Experience working with enterprise WAF platforms such as Akamai App & API Protector, F5 Advanced WAF, or similar technologies.Experience securing cloud-native workloads and applications within Azure, GCP, and/or OCI environments.Experience with container technologies, including Docker and Kubernetes.Experience integrating security tools into CI/CD pipelines and development workflows.Knowledge of OWASP Top 10, Common Weakness Enumeration (CWE), secure API design principles, and application security best practices.Strong analytical, problem-solving, and communication skills with the ability to collaborate across technical teams.It'd be great if you also have:Experience securing AI-enabled applications, LLM-based solutions, or autonomous agent workflows.ExperienceMicrosoft Certified: Azure Security Engineer Associate, GCP Professional Cloud Security Engineer, CISSP, CSSLP, CASE, GWEB, or related security certifications.Experience with Akamai and/or F5 security platforms in large-scale enterprise environments.Experience leading Security Champion programs or mentoring engineering teams on secure development practices.Ability to influence cross-functional teams and drive security improvements through collaboration and technical expertise.Experience developing scalable security frameworks that support innovation while managing enterprise risk.Does this sound like you? Check out what else RXO has to offer.Why Join Us:Our BenefitsComprehensive medical, dental, and vision plans401(k) retirement plan with up to 5% company matchPre-tax accounts to help streamline eligible expensesCompany-paid disability and life insuranceEmployee Assistance Program (EAP)Career and Leadership Development ProgramsPaid time off, company holidays, and volunteer daysOur CultureOur values are the key to our unique culture and our ability to deliver for everyone we serve.We do great things when we are inclusive and work together. To perform with excellence, we learn from one another, value diverse perspectives, operate safely and build strong relationships.The Next StepReady to join our team? We'd love to hear from you. Fill out an application now and join our talent community to learn about future opportunities. We are proud to be an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. All applicants who receive a conditional offer of employment may be required to take and pass a pre-employment drug test. The above statements are not an exhaustive list of all required responsibilities, duties, and skills for this job classification.