Senior Application Security Engineer

The Estée Lauder Companies Inc.; New York (NY); On-site; USD 90,450 - 135,000; Full time

Benefits offered by this job

Health insurance

Wellness programs

Retirement savings plans

Paid leave & holidays

Education-related programs

Job summary

The Estée Lauder Companies Inc. is seeking an experienced Application Security professional to evangelize our security strategy under the Global Head of Application Security.

You will work on SDLC security, DevSecOps, and multi-cloud initiatives to deliver trusted software across global teams. You will test security, provide secure coding consultations, and mentor developers, with a focus on building secure products for clients and internal stakeholders.

Qualifications

• Good knowledge of application security vulnerabilities (SANS, OWASP).
• Experience with threat modelling and risk analysis.
• Understanding of web development best practices.
• Ability to communicate security concepts to both technical and non-technical staff.
• Familiarity with CI/CD pipelines and security integration.

Responsibilities

• Review current security processes and optimize them.
• Coordinate and perform vulnerability assessments using automated and manual tools.
• Provide security consulting and mentoring across DevOps and Software Engineering teams.
• Analyze vulnerability data to identify risks and discern false positives.
• Prepare security vulnerability and risk management reports for stakeholders.
• Ensure deployment of best practice cloud configuration and security tools.
• Lead remediation of vulnerabilities within established timeframes.
• Integrate secure development practices into agile processes.
• Demonstrate strong programming and scripting skills (C#, C/C++, Java, JavaScript, PowerShell, Python).
• Work with APIs: REST, SOAP, SOA and other integrations.
• Familiarity with primary development toolsets: Tools, Code, SQL/DB Security.

Job description

The Estée Lauder Companies Inc. is seeking an experienced Application Security professional to evangelize our security strategy under the Global Head of Application Security.

You will work on SDLC security, DevSecOps, and multi-cloud initiatives to deliver trusted software across global teams. You will test security, provide secure coding consultations, and mentor developers, with a focus on building secure products for clients and internal stakeholders.