Senior Application Security Engineer: Secure SDLC

PACCAR Inc; Renton, Northern (WA, KY); Hybrid; USD 90,000 - 141,000; Full time

Benefits offered by this job

401k with up to 5% company match

Employee Stock Purchase Program (ESPP)

Pension plan

Paid time off

Job summary

PACCAR is seeking an Application Security Engineer to join the Global Security team within the IT Division. You will provide security guidance to development teams, perform secure code review and testing, and help secure APIs across the SDLC.

You will engage early in the software lifecycle, develop threat models, support remediation, and drive secure coding practices in CI/CD pipelines in a collaborative environment.

Qualifications

• Bachelor’s degree in CS/IS/SE/Cybersecurity or related field.
• 5+ years of professional experience in application or software security.
• Hands-on experience with DAST platforms (Burp Suite, WebInspect, OWASP ZAP) and SAST/SCA tools (Fortify, Checkmarx, SonarQube).
• Familiarity with OAuth and/or SAML.
• Experience with SDLC and development methodologies (Waterfall/Agile).
• Experience with Git, GitHub, Azure DevOps.

Responsibilities

• Perform source code reviews using manual analysis and SAST tools to identify vulnerabilities.
• Execute web security assessments on websites, web applications, web services, and APIs using DAST tools.
• Review test results from automated security tools and remove false positives.
• Develop and review threat models to proactively identify security risks.
• Engage with development teams to provide vulnerability remediation support.
• Assist developers with understanding security defects and remediation options.
• Integrate secure coding practices and tooling into CI/CD pipelines.
• Contribute to code reviews and design discussions with a security lens.

Skills

Application security experience

SAST/DAST knowledge

OAuth/SAML knowledge

SDLC/Agile familiarity

Security tooling familiarity

Education

Bachelor's degree in CS/IS/SE/Cybersecurity

Tools

Burp Suite

WebInspect

OWASP ZAP

Fortify

Checkmarx

SonarQube

Git

GitHub

Azure DevOps

Kali Linux

Nmap

Job description

PACCAR is seeking an Application Security Engineer to join the Global Security team within the IT Division. You will provide security guidance to development teams, perform secure code review and testing, and help secure APIs across the SDLC.

You will engage early in the software lifecycle, develop threat models, support remediation, and drive secure coding practices in CI/CD pipelines in a collaborative environment.