Senior Application Security Lead - Secure SDLC

Publicis Groupe Holdings B.V; Chicago, Boston, Irving (IL, MA, TX); Vor Ort; USD 112.800 - 209.600; Vollzeit

Benefits dieser Stelle

Time off & holidays

Comprehensive health coverage

401(k)

Tuition assistance

Commuter benefits

Professional development

Employee recognition

Charitable donation matching

Health coaching and counseling

Zusammenfassung

Publicis Groupe Holdings B.V in Chicago seeks an experienced security engineer to design secure coding practices, conduct advanced security testing, and guide development teams to bake security into the SDLC.

You will drive architecture reviews, threat modeling, and automation to embed security in CI/CD, collaborate across teams, and evolve security platforms to stay ahead of evolving threats.

Qualifikationen

• BS / MS in Computer Science or similar degree
• Minimum of 10 years of experience in related fields
• Direct experience in software development
• Direct experience with at least one or more CI/CD platforms
• Direct experience with application testing (e.g., SAST, DAST, MAST, RAST, IAST)
• Direct experience in application vulnerability management processes
• Working knowledge of current software development methodologies
• Working knowledge of OWASP Top 10 and CWE 25
• Working knowledge of programming languages and scripting
• Working knowledge of software design lifecycle
• Working knowledge of web and app security stack (e.g., API security)
• Working knowledge of cloud security concepts and technologies
• Working knowledge of authentication and authorization flows in web applications
• Strong understanding of threat modeling
• Strong understanding of network security (e.g., WAF, Micro‑segmentation)
• Strong understanding of cryptography topics

Aufgaben

• Perform code analysis of applications, manually and through application security testing solutions, to identify vulnerabilities.
• Provide context and rationalization for identified vulnerabilities.
• Review and recommend remediation actions for identified vulnerabilities.
• Drive and support security architecture design reviews and threat modeling of our products.
• Improve the accessibility of security through automation, vulnerability exception processing, embedding secure practices within continuous integration pipelines, and other related activities.
• Build trust relationships with teams to effectively achieve security goals.
• Drive cross-disciplinary initiatives to improve the security of our engineering ecosystem and products.
• Contribute to relevant security standards, processes, and other formal documentation.
• Collaborate with teams to ensure understanding and compliance with relevant security policies, standards, and best practices.
• Assist in onboarding new teams and applications to security platforms.

Kenntnisse

Secure coding

Security testing

CI/CD platforms

SAST/DAST/IAST

Vulnerability management

Threat modeling

Cloud security

API security

Cryptography

Programming languages

Software development lifecycle

OWASP Top 10

Team collaboration

Ausbildung

BS / MS in Computer Science or similar degree

Jobbeschreibung

Overview

See how Epsilon powers connected marketing by unlocking the full potential of data and identity.

How you’ll Make an Impact

You will help to ensure the secure delivery of Epsilon’s software applications by designing and implementing secure coding practices, conducting advanced security testing through application security platforms, and collaborating with development teams to ensure security is integrated throughout the development lifecycle.You will be a core member of the application security team as a contributor in the areas of secure software architecture and design, web application vulnerability and remediation, and a variety of tools used in secure development and testing. You will provide support, guiding and advising multiple development teams to develop secure applications and services in accordance with the established application security policies and standards. Finally, you will be responsible for recommending and guiding the implementation of modifications and enhancements to ensure the organization is evolving with the threat landscape. By continuously improving and expanding our security platforms and fostering strong collaborative relationships, you will create a more secure, efficient, and proactive development environment, ultimately ensuring the integrity and safety of Epsilon's software applications.

What you’ll Achieve

• Perform code analysis of applications, manually and through application security testing solutions, to identify vulnerabilities.
• Provide context and rationalization for identified vulnerabilities.
• Review and recommend remediation actions for identified vulnerabilities.
• Drive and support security architecture design reviews and threat modeling of our products.
• Improve the accessibility of security through automation, vulnerability exception processing, embedding secure practices within continuous integration pipelines, and other related activities.
• Build trust relationships with teams to effectively achieve security goals.
• Drive cross-disciplinary initiatives to improve the security of our engineering ecosystem and products.
• Contribute to relevant security standards, processes, and other formal documentation.
• Collaborate with teams to ensure understanding and compliance with relevant security policies, standards, and best practices.
• Assist in onboarding new teams and applications to security platforms.

Who you Are

• What you’ll bring with you:
• BS / MS in Computer Science or similar degree
• Minimum of 10 years of experience in related fields
• Direct experience in software development
• Direct experience with at least one or more CI/CD platforms
• Direct experience with application testing (e.g., SAST, DAST, MAST, RAST, IAST)
• Direct experience in application vulnerability management processes
• Working knowledge of current software development methodologies
• Working knowledge of OWASP Top 10 and CWE 25
• Working knowledge of programming languages and scripting
• Working knowledge of software design lifecycle
• Working knowledge of web and app security stack (e.g., API security)
• Working knowledge of cloud security concepts and technologies
• Working knowledge of authentication and authorization flows in web applications
• Strong understanding of threat modeling
• Strong understanding of network security (e.g , WAF, Micro-segmentation)
• Strong understanding of cryptography topics
• Why you might stand out from other talent
• Strong collaboration
• interpersonal, collaborative, written and verbal communication skills
• Excellent problem solving, critical thinking skills
• Ability to work independently and self-motivate

Base Salary: $112,800.00 - $209,600.00

Actual compensation within the range will be dependent upon, but not limited to the individual’s skills, experience, qualifications, location and application employment laws. The salary pay range is subject to change and may be modified at any time.

Additional Information

When you join Epsilon, we’ll create something EPIC together.We’re a global leader in data and identity, with deep expertise in digital media, clean rooms, customer data platforms, loyalty and marketing services. Positioned at the center of Publicis Groupe, Epsilon helps brands deliver personalized experiences at scale and build lasting customer relationships by unlocking the full potential of data and identity. Epsilon operates in 30+ countries across EMEA, the Americas and APAC, with more than 8,000 employees.

Check out a few of these resources to learn more about what makes Epsilon so EPIC:

Our Culture: https://www.epsilon.com/us/about-us/our-culture-epsilon

Life at Epsilon: https://www.epsilon.com/us/about-us/epic-blog

Epsilon has five values that define our culture and guide us as we create value for our clients, our people and consumers. We seek candidates who align with our company values, demonstrate them and make them meaningful in their day-to-day work:

• Act with integrity. We are transparent and have the courage to do the right thing.
• Work together to win together. We believe collaboration is the catalyst that unlocks our full potential.
• Innovate with purpose. We shape the market with big ideas that drive big outcomes.
• Respect all voices. We embrace differences and foster a culture of connection and belonging.
• Empower with accountability. We trust each other to own and deliver on common goals.

Because You Matter

As an Epsilon employee, you deserve perks and benefits that put you, your family and your finances first. Our benefits encompass a wide range of offerings, including but not limited to:

• Time to recharge: Flexible time off (FTO), 14 paid holidays, paid sick time
• Family well-being: Parental/new child leave, childcare & elder care assistance, adoption assistance
• Extra perks: Comprehensive health coverage, 401(k), tuition assistance, commuter benefits, professional development, employee recognition, charitable donation matching, health coaching and counseling

Epsilon benefits are subject to eligibility requirements and other terms.

Epsilon is an Equal Opportunity Employer. Epsilon’s policy is not to discriminate against any applicant or employee based on actual or perceived race, age, sex or gender (including pregnancy), marital status, national origin, ancestry, citizenship status, mental or physical disability, religion, creed, color, sexual orientation, gender identity or expression (including transgender status), veteran status, genetic information or any other characteristic protected by applicable federal, state or local law. Epsilon also prohibits harassment of applicants and employees based on any of these protected categories. Epsilon will provide accommodations to applicants who need accommodations to complete the application process. Please reach out to [e-mail] to request an accommodation.

For San Francisco Bay and Los Angeles Areas: Epsilon will consider qualified applicants with criminal histories for employment in a manner consistent with the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance and San Francisco Police Code Sections 4901-4919, commonly referred to as the San Francisco Fair Chance Ordinance. Applicants with criminal histories are welcome to apply.

#LI-TG1

Compensation Range: USD $112,800.00 - USD $209,600.00/Annually. This is the pay range the Company believes it will pay for this position at the time of this posting. Consistent with applicable law, compensation will be determined based on the skills, qualifications, and experience of the applicant along with the requirements of the position, and the Company reserves the right to modify this pay range at any time. Temporary roles may be eligible to participate in our freelancer/temporary employee medical plan through a third-party benefits administration system once certain criteria have been met. For regular roles, the Company will offer medical coverage, dental, vision, disability, 401k, and paid time off. The Company anticipates the application deadline for this job posting will be 11/19/2026.