Senior App Sec Engineer — Hybrid, Cloud & CI/CD Impact

CoBank; Greenwood Village (CO); Hybrid; USD 121.000 - 149.000; Vollzeit

Benefits dieser Stelle

Hybrid work model

Tuition reimbursement

CoBank University

401k matching + non-elective

Volunteer/Community days

Educational assistance

Zusammenfassung

CoBank's Application Security team is seeking an experienced professional to protect our applications, cloud services, and data. You will collaborate with engineering and DevOps to embed security into CI/CD pipelines, cloud platforms, and containerized environments, while conducting testing, risk assessments, and remediation.

Join a team that emphasizes secure coding, CNAPP stewardship, and proactive threat management in a hybrid Colorado-based workplace.

Qualifikationen

• Must have 5 years of hands-on cybersecurity experience in application security.
• 3 years of experience with SAST/DAST, GitHub, and secure coding guidance.
• 2 years of hands-on cloud security experience (AWS) and Kubernetes.

Aufgaben

• Implement and support security projects for applications and cloud solutions.
• Champion secure coding; perform SAST/DAST and use testing tools; remediate findings.
• Administer CNAPP tools; conduct software supply chain and vendor risk assessments.
• Support Penetration Testing events and communicate remediation plans.
• Advise on secure architecture; monitor security alerts and participate in on-call.

Kenntnisse

Secure coding concepts

CI/CD security

Cloud security

SAST/DAST tooling

Kubernetes

AWS

Vulnerability remediation

Threat modeling

Communication

Team collaboration

Ausbildung

Bachelor's Degree in Computer Science, Cybersecurity, Engineering, or related field

Four years related experience in lieu of degree

Tools

Checkmarx

Upwind

GitHub

CNAPP

Venminder

Terraform

CloudTrail

Splunk

Jobbeschreibung

CoBank's Application Security team is seeking an experienced professional to protect our applications, cloud services, and data. You will collaborate with engineering and DevOps to embed security into CI/CD pipelines, cloud platforms, and containerized environments, while conducting testing, risk assessments, and remediation.

Join a team that emphasizes secure coding, CNAPP stewardship, and proactive threat management in a hybrid Colorado-based workplace.