Senior Application Security Engineer - Containers

ADP; Roseland (NJ); Híbrido; USD 75 000 - 184 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Medical

Dental

Vision

Life Insurance

Matched Retirement Savings

Wellness Program

Disability Insurance

Paid Time Off

Resumo da oferta

Automatic Data Processing, Inc. (ADP) is seeking a Senior Container Application Security Engineer to design, implement, and manage container security scanning and governance.

The role partners with stakeholders to address risks and advance secure container practices across ADP’s platforms. The position requires broad IT/cybersecurity experience, knowledge of container security, and strong communication skills to work with remote teams and multiple business units.

Qualificações

• Five years or more IT/cybersecurity experience, with 3+ years in software engineering roles.
• Strong understanding of container security vulnerabilities and related risks.
• Familiarity with web technologies and secure coding practices.
• Experience with CI/CD pipelines and cloud/container security.
• Ability to communicate security concepts to technical and non-technical stakeholders.

Responsabilidades

• Drive container security operations and supply chain risk initiatives across ADP’s business units.
• Integrate security into DevOps pipelines and institutionalize container image scanning.
• Support management of supply chain vulnerabilities, image provenance, and governance (GRC).
• Develop solutions for Container Security Bill of Materials (CSBom) and Vulnerability Exchange (VEX).
• Create SOPs and provide metrics/reports to guide improvements.

Conhecimentos

Container security

Docker/OCI

CI/CD pipelines

Java/C#/JavaScript/Python

Security governance

Agile/Cloud security

Formação académica

Bachelor's degree or equivalent

Ferramentas

Bitbucket

Jenkins

Rally/JIRA

Artifactory/Nexus

SonarQube

Snyk

Descrição da oferta de emprego

ADP is hiring a Senior Application Security Engineer - Containers

This Hybrid role can sit in Roseland, NJ or Alpharetta, GA

Unlock Your Career Potential: Global Security Organization at ADP.

Do you have a passion for going on the offensive to safeguard critical information?

As ADP’s Global Security Organization (GSO), we know that our clients rely on us for human capital management solutions, but beyond that, they entrust us with one of their most valuable assets — their employee data. We are honored by this trust and are laser focused on securing data at every step in the information lifecycle, ensuring integrity, confidentiality and compliance with industry and government regulations at all times. From the cloud to the data center and across every emerging device, you’ll join a team of experts in the GSO who are always staying one step ahead in this ever-changing world of data by continually evolving our strategies and technologies to protect ADP and our clients.

The mission of the GSO Enterprise Application Security [EAS] team is to protect ADP's internally developed products from existing and emerging security threats. We improve internal product security posture by integrating and automating security controls early in the product development life cycle and aid in uncovering security risks. This work empowers and supports development teams to recognize and address security risks in a timely manner.

The EAS team has an opening for a Senior Container Application Security Engineer to design, implement, and manage container security scanning services. This role involves partnering with key stakeholders to assess security risks and establish a governance framework for the secure use of container images before their release into production.

Like what you see?

What You’ll Do

Learn more about ADP at tech.adp.com/careers

• Drive container security operations including supply chain risk initiatives across ADP’s different business units.
• Build and Support security into the DevOps pipelines & help institutionalize the security scanning of container images in line with shift left strategy.
• Provide support for managing supply chain vulnerabilities, image provenance, adversarial container security, and governance risk, and compliance (GRC)
• Assist in developing solutions to generate a Container Security Bill of Materials (CSBom) and Vulnerability Exchange (VEX)
• Promote a culture around secure container development through training, governance, and metrics.
• Maintain awareness of container cybersecurity threats and best practices to enable securing and hardening at scale.
• Customize policies, rules, and alerts to comply with established policies and settings.
• Bring technical SME knowledge into the program and drive excellence.
• Metrics/Reporting
  • Identify meaningful KPIs/KRI’s to drive progress and improvement
  • Provide weekly Scanning and Monitoring reports.
• Create and maintain Standard Operating Procedures (SOP)
• Perform other duties as required.

Experience You'll Need

• Basic knowledge and understanding of container security vulnerabilities (OWASP).
• Understanding of container image formats such as Docker, OCI, etc.
• Experience in implementing and rolling out container scanning solutions as part of container development.
• Familiarity with internet technologies and web development secure coding best practices.
• Understanding CI/CD pipelines covering source control, integration, and deployment (ex: Bitbucket, Jenkins, Rally, JIRA, Artifactory, Nexus, SonarQube, git, Snyk).
• Previous software engineering/architecture experience (Java, C#, .Net, JavaScript, Python) preferred.
• Strong analytical/problem-solving skills and basic cross-functional knowledge across multiple development and security disciplines.
• Experience in training development teams on secure container practices.
• Basic understanding of Test Automation tools and framework - NIST Container Security Framework.
• Ability to communicate security-related concepts to technical and non-technical staff.
• Understanding of Agile methodologies, Cloud, Container and Application Security.
• Good problem-solving skills, communication and presentation skills.
• Ability to work effectively as part of a remote team.
• Self-motivated with a positive attitude.

To Succeed In This Role

• You’ll have a bachelor’s degree or equivalent.

Qualifications

• Five years or more experience in various IT or cybersecurity roles, with three or more years of experience specifically in software engineering roles.
• Basic knowledge and understanding of container security and related risks.
• Familiarity with internet technologies and web development best practices.
• Strong analytical/problem-solving skills and basic cross-functional knowledge across multiple development and security disciplines.
• Ability to communicate security-related concepts to a broad range of technical and non-technical stakeholders.
• Understanding of Agile methodologies and container & cloud security.
• Familiarity with microservices architecture and design patterns.
• Good analytic skills, including qualitative and quantitative data analysis to support and defend data-driven decision-making regarding system threats, vulnerabilities, and risk.
• Any of the following are a plus but not necessary: CEH, CISSP, CSSLP, GCIA, GPEN, GWAPT

You'll Love Working Here Because You Can

• Have courageous team collaboration. Courage comes from how associates are willing to have difficult conversations, speak up, be an owner, and challenge one another's ideas to net out the best solution.
• Deliver at epic scale. We deliver real user outcomes using strong judgment and good instincts. We're obsessed with the art of achieving simplicity with a focus on client happiness and productivity.
• Be surrounded by curious learners. We align ourselves with other smart people in an environment where we grow and elevate one another to the next level. We encourage our associates to listen, stay agile, and learn from mistakes.
• Act like an owner & doer. Mission-driven and committed to leading change, you will be encouraged to take on any challenge and solve complex problems. No tasks are beneath or too great for us. We are hands-on and willing to master our craft.
• Give back to others. Always do the right thing for our clients and our community and humbly give back to the community where we live and work. Support our associates in times of need through ADP's Philanthropic Foundation.
• Join a company committed to equality and equity. Our goal is to impact lasting change through our actions.

What are you waiting for?

Find out why people come to ADP and why they stay: https://youtu.be/ODb8lxBrxrY

(ADA version: https://youtu.be/IQjUCA8SOoA )

Base salary offers for this position may vary based on factors such as location, skills, and relevant experience. Some positions may include additional compensation in the form of bonus, equity or commissions. We offer the following benefits: Medical, Dental, Vision, Life Insurance, Matched Retirement Savings, Wellness Program, Short-and Long-Term Disability, Charitable Contribution Match, Holidays, Personal Days & Vacation, Paid Volunteer Time Off, and more. The compensation for this role is USD $74,800.00 - USD $183,900.00 / Year*

• Actual compensation will not be less than the applicable minimum wage or minimum exempt salary requirement under federal, state and local laws.

A little about ADP:

We are a comprehensive global provider of cloud-based human capital management (HCM) solutions that unite HR, payroll, talent, time, tax and benefits administration and a leader in business outsourcing services, analytics, and compliance expertise. We believe our people make all the difference in cultivating a down-to-earth culture that embraces our core values, welcomes ideas, encourages innovation, and values belonging. We've received recognition for our work by many esteemed organizations, learn more at ADP Awards and Recognition.

Diversity, Equity, Inclusion & Equal Employment Opportunity at ADP:

ADP is committed to an inclusive, diverse and equitable workplace, and is further committed to providing equal employment opportunities regardless of any protected characteristic including: race, color, genetic information, creed, national origin, religion, sex, affectional or sexual orientation, gender identity or expression, lawful alien status, ancestry, age, marital status, protected veteran status or disability. Hiring decisions are based upon ADP’s operating needs, and applicant merit including, but not limited to, qualifications, experience, ability, availability, cooperation, and job performance.

Ethics at ADP:

ADP has a long, proud history of conducting business with the highest ethical standards and full compliance with all applicable laws. We also expect our people to uphold our values with the highest level of integrity and behave in a manner that fosters an honest and respectful workplace. Click https://jobs.adp.com/life-at-adp/ to learn more about ADP’s culture and our full set of values.