Senior AppSec Engineer - Cloud, CI/CD & Automation

New Balance; Lawrence (MA); Presencial; USD 104 500 - 155 500; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Medical insurance

Dental insurance

Vision insurance

401K

Resumo da oferta

New Balance is seeking a Senior Application Security Engineer to safeguard applications, APIs, and cloud services across the SDLC. You will partner with development, cloud, and security teams to mature the security program and automate risk remediation.

The role emphasizes secure development practices, vulnerability management, and PCI DSS compliance in Azure/hybrid environments. Strong coding skills and cloud security expertise are required.

Qualificações

• 5+ years of Application Security, Software Security, Cloud Security, Security Engineering, or related experience.
• Experience integrating security controls into modern SDLC and DevSecOps environments.
• Experience building security automation and orchestration workflows.
• Experience securing cloud-native applications within Azure environments.
• Hands-on experience with: Python, JavaScript, .NET/C#, Azure, CI/CD technologies, Akamai, Salesforce Commerce Cloud, Atlassian Stack, and PKI technologies.
• Strong knowledge of: OWASP Top 10, OWASP ASVS, Threat Modeling, Secure SDLC, Application Security Testing, API Security, DevSecOps, Cloud Security, Container Security, Vulnerability Prioritization, PCI DSS 4.0.
• Bachelor of Science in Computer Science, Engineering, Information Technology, or related discipline, or equivalent experience.
• Relevant certifications: CSSLP, CISSP, GWAPT, AZ-500.

Responsabilidades

• Partner with development teams to implement secure-by-design principles throughout the SDLC.
• Conduct application security assessments for internally developed and customer-facing applications.
• Perform threat modeling and secure architecture reviews for cloud and hybrid environments.
• Review application, API, and cloud security findings and provide remediation guidance.
• Establish and maintain application security policies, standards, and procedures.
• Mentor developers and technical teams on secure development practices and secure coding techniques.
• Collaborate with DevOps teams to integrate security controls into CI/CD pipelines.
• Support implementation, administration, and optimization of SAST, SCA, DAST, API Security, Container Security, and related security tools.
• Lead SOAR workflow development for Application Security and Vulnerability Management.
• Design automated processes for vulnerability intake, risk prioritization, ticketing, and remediation tracking.
• Integrate security tools with cloud platforms and ticketing systems into automated workflows.

Conhecimentos

Python

JavaScript

.NET/C#

Azure

CI/CD

Akamai

Salesforce Commerce Cloud

Atlassian Stack

PKI technologies

OWASP Top 10

Threat Modeling

Formação académica

Bachelor of Science in Computer Science, Engineering, IT, or related

Ferramentas

Azure

CI/CD tools

Akamai

Salesforce Commerce Cloud

Atlassian Stack

PKI technologies

Descrição da oferta de emprego

New Balance is seeking a Senior Application Security Engineer to safeguard applications, APIs, and cloud services across the SDLC. You will partner with development, cloud, and security teams to mature the security program and automate risk remediation.

The role emphasizes secure development practices, vulnerability management, and PCI DSS compliance in Azure/hybrid environments. Strong coding skills and cloud security expertise are required.