Senior AppSec Engineer: Cloud & CI/CD Security (Hybrid)

H-E-B; San Antonio (TX); Hybrid; USD 120,000 - 150,000; Full time

Job summary

H-E-B is seeking a Staff Application Security Engineer to consult with internal teams and external vendors, collect requirements, and implement innovative security solutions. You’ll coach and mentor staff, helping secure cloud platforms and automate security in CI/CD pipelines.

The role focuses on designing and deploying secure infrastructure, guiding SSDLC, and ensuring compliance across cloud and on-prem environments. Hybrid work is supported with Austin/Dallas/San Antonio options.

Qualifications

• 10+ years of experience developing / supporting system and security solutions in medium to large size enterprises.
• Experience building / integrating systems in cloud and on-premises environments using enterprise source code management tools and automation tooling.
• Advanced working understanding of web applications, web servers, application firewalls, frameworks, and protocols related to web application development, deployment, and operation in the cloud.
• Working understanding of log analysis, application performance monitoring, API security, container security, AWS cloud security, Agile and other project management methodologies, PCI DSS, HIPAA regulations.
• Advanced skills in AWS, Azure, or Google Cloud Platform; Terraform, CloudFormation, Pulumi, or Ansible; Python, Golang, PowerShell, Java, or Shell script.
• Advanced skills in Linux-based and Windows Server operating systems management, secrets management, and vaulting technologies.
• Advanced skills using APIs to optimize tasks / achieve automation.
• Advanced skills in cloud resources: virtual networking, access controls (security groups, ACLs), service endpoints, application / network load balancing, API gateways, service principals, functions / serverless, storage buckets, containers, block storage, file shares

Responsibilities

• Master CI / CD pipelines; creates patterns of automation, infrastructure deployment, maintenance, monitoring, security, and compliance using industry and enterprise best practices.
• Collaborates with Digital Tech teams to design / develop / analyze / implement systems software and applications.
• Builds security standards for teams; integrates platform, including container and vulnerability management tools within CI / CD pipelines.
• Serves as SME for application security; provides guidance / coaches on industry best practices and defense in-depth strategies for security posture of cloud-based digital platforms.
• Collaborates with project teams on testing / evaluation of new solutions; tests cloud configurations and infrastructure for vulnerabilities.
• Ensures cloud infrastructure complies with security and compliance control requirements.
• Designs, develops, documents, automates, implements security infrastructure in code.
• Ensures concise documentation to formalize security processes and guardrails.
• Guides development teams to apply secure automation patterns / encourage secure software development lifecycle (SSDLC) best practices.
• Coaches / mentors team Partners

Skills

Cloud security

AWS

Azure

GCP

Terraform

CI/CD pipelines

Python

Golang

Linux

Windows Server

API automation

Security monitoring

Education

Bachelor's degree in Cyber Security

Tools

Terraform

CloudFormation

Pulumi

Ansible

Git

Job description

H-E-B is seeking a Staff Application Security Engineer to consult with internal teams and external vendors, collect requirements, and implement innovative security solutions. You’ll coach and mentor staff, helping secure cloud platforms and automate security in CI/CD pipelines.

The role focuses on designing and deploying secure infrastructure, guiding SSDLC, and ensuring compliance across cloud and on-prem environments. Hybrid work is supported with Austin/Dallas/San Antonio options.