Senior Security Engineer, DevSecOps

Bath & Body Works; Columbus (OH); Remote; USD 80,000 - 120,000; Full time

Job summary

An established industry player is seeking a Senior Application Security Engineer to enhance its Information Security team. In this pivotal role, you will collaborate with engineering teams to define secure technical solutions, conduct penetration testing, and evaluate DevSecOps tools. Your expertise will help shape the company's security posture, ensuring robust protection against vulnerabilities while fostering a culture of security awareness. Join a forward-thinking organization that values diversity and is committed to empowering its associates through comprehensive benefits and a supportive work environment. This remote position offers a unique opportunity to drive impactful security initiatives.

Benefits

Robust medical coverage

401k with company match

Mental health support

Paid time off

Tuition reimbursement

40% merchandise discount

Qualifications

• 5+ years in cybersecurity with a focus on application security and compliance.
• Experience in software architecture with a security focus.

Responsibilities

• Lead security initiatives to tackle critical challenges across the company.
• Design and integrate security frameworks into CI/CD pipelines.

Skills

Cybersecurity

Application Security

Data Encryption

Network Security

Cloud Security

Threat Modeling

Secure Coding Practices

Education

Bachelor’s degree

Tools

GitLab

Burpsuite

Checkmarx

Veracode

Webinspect

Job description

Description

At Bath & Body Works, everyone belongs. We are committed to creating a diverse, equitable and inclusive culture focused on delivering exceptional fragrances and experiences to our customers. We focus on recruiting, retaining, and advancing diverse talent where our associate population is as diverse as the communities we serve, live and work. In addition, we work to improve our communities and our planet in a way that will make us proud for years to come because we believe the world is a brighter, happier place when everyone has access to the things that make them happy.

As a Senior Application Security Engineer, you will play a pivotal role in shaping the growth of Information Security's (InfoSec) Application Security team, collaborating with engineering teams across all of IT. You will interact with teams early in their processes to define & provide secure technical solutions and establish security standards and patterns. You will be reporting to a Senior Manager on the Governance Risk and Compliance team.

Your responsibilities will include penetration testing, threat modeling, and code reviews. You will also participate in evaluation and integration of DevSecOps tools.

As a key member of the team, you will drive company-wide projects across diverse tech stacks, working with engineering leaders to remediate security challenges. You will define and evolve the technical vision for scaling application security practices across the organization.

This is a remote role.

Responsibilities:

1. Lead company-wide security initiatives to address critical security challenges.
2. Design and integrate security frameworks into CI/CD pipelines, especially with GitLab.
3. Build and nurture cross-company relationships to achieve security objectives.
4. Provide guidance on product security processes and standards.
5. Define and expand partnerships with key engineering teams across Bath and Body Works.
6. Research and evaluate new technologies to enhance the company's security posture.
7. Identify potential threats and vulnerabilities in our systems and data, as well as help develop and implement solutions to safeguard them.
8. Enable cross-functional teams to implement security solutions aligned with Trust-by-Design principles.
9. Contribute to security education and awareness programs by preparing and delivering training materials across the company.
10. Shape strategies to automate and scale application and product security efforts.

Qualifications

Experience:

1. 5 years of professional experience in cybersecurity, with a deep background in application development and application security, data encryption, and compliance with security standards, as well as knowledge of network and cloud security.
2. Experience in software and infrastructure architecture with a focus on security.
3. Extensive experience with common code and network vulnerabilities, their impacts, and remediation strategies.
4. Background in writing code in at least one programming language, such as Java, Golang, or C#, and a scripting language like Bash or Python.
5. Applied knowledge of cryptography, PKI, TLS, and practical implementations.
6. Experience with threat modeling and Secure Software Development Life Cycles.
7. Experience operationalizing the discovery of code-level vulnerabilities and improving secure coding practices.
8. Experience scanning containers and integrating CI/CD platforms with security tools such as Burpsuite, Checkmarx, Veracode, Webinspect.

*Note: The candidate must pass a coding test.

Education:

1. Bachelor’s degree or equivalent experience.

Core Competencies:

1. Lead with Curiosity & Humility.
2. Build High Performing Teams for Today & Tomorrow.
3. Influence & Inspire with Vision & Purpose.
4. Observe, Engage & Connect.
5. Strive to Achieve Operational Excellence.
6. Deliver Business Results.

Benefits:

Bath & Body Works associates are the heart of our business. That’s why we’re proud to offer benefits that empower you to Dream Bigger & Live Brighter. Benefits for eligible associates include:

1. Robust medical, pharmacy, dental and vision coverage. Plus, access to our onsite wellness center and pharmacy located at the Columbus, OH home office.
2. 401k with company match and Associate Stock Purchase program with discount.
3. No-cost mental health and wellbeing support through our Employee Assistance Program (EAP).
4. Opportunity for paid time off and paid parental leave. Plus, access to family and lifestyle programs including an inclusive family building benefit, childcare discounts, and home, auto and pet insurance.
5. Tuition reimbursement and scholarship opportunities for post-secondary education programs.
6. 40% merchandise discount and gratis that encourages you to come back to your senses!

Visit bbwbenefits.com for more details.

The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all responsibilities, duties and skills required.

We will consider for employment all qualified applicants, including those with arrest records, conviction records, or other criminal histories, in a manner consistent with the requirements of any applicable state and local laws.

We are an equal opportunity and affirmative action employer. We do not make employment decisions based on an individual’s race, color, religion, gender, gender identity, national origin, citizenship, age, disability, sexual orientation, marital status, pregnancy, genetic information, protected veteran status or any other legally protected status, and we comply with all laws concerning nondiscriminatory employment practices. We are committed to providing reasonable accommodations for associates and job applicants with disabilities.

Application window will close when all role(s) are filled.