Senior Application Security Engineer — AI-Driven Security & DevOps

Starbucks Corp.; Nashville (TN); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) with company match

Tuition assistance

Job summary

Starbucks Coffee Company is seeking a senior Application Security Engineer to lead the design and execution of an enterprise security program for applications. You will provide security guidance, conduct assessments, and drive secure development across platforms using CI/CD pipelines (GitHub Enterprise/Cloud, GitLab, Azure DevOps).

You will also mentor teams on OWASP Top 10, SANS Top 25, and incident response, while integrating AI-assisted security improvements for speed and scale.

Qualifications

• Bachelor’s degree in a relevant field or 5+ years of equivalent cybersecurity experience.
• 6+ years in IT with 6+ years in infrastructure/security.
• 4+ years with infrastructure as code and enterprise tools.

Responsibilities

• Owns application security services including SAST, DAST, SCA, and pen tests.
• Builds and improves security services with AI-assisted capabilities.
• Remediates threats with cross-team collaboration and expert analysis.
• Explains and corrects OWASP Top 10 and SANS Top 25 issues.
• Evaluates AI outputs for accuracy and risk relevance.
• Leads security training and participates in incident response.

Skills

SAST

DAST

SCA

Penetration testing

Code review

Security assessments

OWASP Top 10

SANS Top 25

CI/CD pipelines

GitHub Enterprise

GitHub Cloud

GitLab

Azure DevOps

Secure cloud deployment

Programming (Java, Go, Python, Ruby, C

Education

Bachelor's degree or 5+ years cybersecurity experience

Tools

GitHub Enterprise

GitHub Cloud

GitLab

Azure DevOps

Job description

Starbucks Coffee Company is seeking a senior Application Security Engineer to lead the design and execution of an enterprise security program for applications. You will provide security guidance, conduct assessments, and drive secure development across platforms using CI/CD pipelines (GitHub Enterprise/Cloud, GitLab, Azure DevOps).

You will also mentor teams on OWASP Top 10, SANS Top 25, and incident response, while integrating AI-assisted security improvements for speed and scale.