Manager, Cybersecurity - Application Security

Starbucks; Nashville (TN); On-site; USD 137,000 - 229,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Life insurance

Disability insurance

Paid parental leave

Vacation

Job summary

Starbucks is seeking an onsite Senior Application Security Leader to manage planning, coordination, and continual improvement of application security practices and technology platforms. You will work closely with development teams to promote security fundamentals and processes across the SDLC, driving operational excellence and sponsor opportunities for innovation.

You will lead the team’s engagement, development, and performance, evangelize security program fundamentals, and define scalable

Qualifications

• 7+ years of experience in an information technology discipline.
• 5+ years of experience in application development or application security.
• Knowledge in application development and supporting a development environment.
• Experience with OAuth or other application authentication methods.
• In-depth knowledge and experience of CI/CD best practices.
• Development experience with at least one modern language such as Java, Python, Ruby, C++, or C#.
• Certifications such as CISSP, CISM, CIPM, CEH, or others focused on cybersecurity, data privacy, or information risk management.
• Experience working with Bug Bounty or Vulnerability Disclosure programs.

Responsibilities

• Lead planning, coordination, and continual improvement of application security practices and technology platforms at Starbucks.
• Collaborate with development teams to promote security fundamentals and processes across the SDLC.
• Drive operational excellence and sponsor opportunities for innovation within the security team.
• Develop requirements and manage processes to deliver a world-class application security program.
• Lead incident response and maintain support documentation.

Skills

Leadership

Problem-solving

Communication

Education

CISSP

CISM

CIPM

CEH

Tools

OAuth

Java

Python

Ruby

C++

C#

Job description

In this onsite leadership role, you will manage planning, coordination, and continual improvement of application security practices and technology platforms at Starbucks. You will work closely with application development teams to promote application security fundamentals, tools, and processes throughout the SDLC.

Key Responsibilities

• Introduce technical topics, sponsor opportunities for innovation, and recognize technical excellence.
• Drive the vision of operational excellence across the team.
• Model leadership behaviors grounded in Starbucks Mission and Values.
• Lead the team’s engagement, development, and performance.
• Collaborate with cross-functional teams to deliver projects and enhancements.
• Evangelize application security program fundamentals, tools, and processes, acting as a consultative partner.
• Develop requirements and plan and manage process and practices to ensure delivery of a world class application security program.
• Partner with other teams to continuously improve and advance the organization’s operational security capabilities.
• Lead the team with a vision that combines software development and systems engineering expertise to deliver self-service capabilities for application security platforms.
• Build and lead a supportive team culture where team members succeed together.
• Challenge and inspire the team to achieve world class results.
• Support partners in career growth.
• Define and maintain processes, procedures, and expectations for the team’s support responsibilities.
• Ensure appropriate support documentation exists.
• Lead the team through high severity operational incidents.

Requirements

• 7+ years of experience working in an information technology discipline.
• 5+ years of experience in application development or application security.
• Knowledge in application development and supporting a development environment.
• Experience with OAuth or other application authentication methods.
• In-depth knowledge and experience of CI/CD best practices.
• Development experience with at least one modern language such as Java, Python, Ruby, C++, or C#.
• Excellent problem-solving abilities.
• Certifications such as CISSP, CISM, CIPM, CEH, or others focused on cybersecurity, data privacy, or information risk management.
• Experience working with Bug Bounty or Vulnerability Disclosure programs.

Technologies

• OAuth
• Java
• Python
• Ruby
• C++
• C#

Role Details

• Location: Nashville, TN (onsite)
• Compensation: USD 137,300 - 228,900 per year
• Minimum Experience: 7 years

Benefits

• Medical, dental, and vision coverage
• Basic and supplemental life insurance
• Other voluntary insurance benefits
• Short-term and long-term disability
• Paid parental leave
• Family expansion reimbursement
• Paid vacation from date of hire
• Sick time accrued at 1 hour for every 25 hours worked
• Eight paid holidays
• Two personal days per year
• 401(k) retirement plan with employer match
• Discounted company stock program (S.I.P.)
• Starbucks equity program (Bean Stock)
• Incentivized emergency savings
• Financial well-being tools
• 100% upfront tuition coverage for a first-time bachelor’s degree through Arizona State University’s online program via the Starbucks College Achievement Plan
• Student loan management resources
• Access to other educational opportunities
• Backup care
• DACA reimbursement
• Reasonable accommodations for job applicants with disabilities