Senior Security Engineer, DevSecOps

Bath & Body Works; Columbus (OH); Remote; USD 80,000 - 120,000; Full time

Job summary

Join a forward-thinking company as a Senior Application Security Engineer, where you'll shape the future of application security. In this pivotal role, you'll collaborate with engineering teams to define secure solutions and establish security standards. Your expertise in cybersecurity, application development, and threat modeling will drive company-wide projects, ensuring robust security practices across diverse tech stacks. This remote position offers a chance to make a significant impact while enjoying a comprehensive benefits package that empowers you to thrive both personally and professionally.

Benefits

Robust medical, pharmacy, dental and vision coverage

401k with company match

No-cost mental health support

Paid time off and parental leave

Tuition reimbursement

40% merchandise discount

Qualifications

• 5+ years in cybersecurity with a focus on application security and data encryption.
• Experience in software architecture and common vulnerabilities.

Responsibilities

• Lead security initiatives and design security frameworks for CI/CD pipelines.
• Conduct penetration testing and threat modeling.

Skills

Cybersecurity

Application Security

Data Encryption

Network Security

Cloud Security

Threat Modeling

Secure Coding Practices

Problem Solving

Education

Bachelor's degree or equivalent experience

Tools

GitLab

Burpsuite

Checkmarx

Veracode

Webinspect

Job description

At Bath & Body Works, everyone belongs. We are committed to creating a diverse, equitable and inclusive culture focused on delivering exceptional fragrances and experiences to our customers. We focus on recruiting, retaining, and advancing diverse talent where our associate population is as diverse as the communities we serve, live and work. In addition, we work to improve our communities and our planet in a way that will make us proud for years to come because we believe the world is a brighter, happier place when everyone has access to the things that make them happy.

As a Senior Application Security Engineer, you will play a pivotal role in shaping the growth of Information Security's (InfoSec) Application Security team, collaborating with engineering teams across all of IT. You will interact with teams early in their processes to define & provide secure technical solutions and establish security standards and patterns. You will be reporting to a Senior Manager on the Governance Risk and Compliance team.

Your responsibilities will include penetration testing, threat modeling, and code reviews. You will also participate in evaluation and integration of DevSecOps tools.

As a key member of the team, you will drive company-wide projects across diverse tech stacks, working with engineering leaders to remediate security challenges. You will define and evolve the technical vision for scaling application security practices across the organization.

This is a remote role.

Responsibilities:

1. Lead company-wide security initiatives to address critical security challenges.
2. Design and integrate security frameworks into CI/CD pipelines, especially with GitLab.
3. Build and nurture cross-company relationships to achieve security objectives.
4. Provide guidance on product security processes and standards.
5. Define and expand partnerships with key engineering teams across Bath and Body Works.
6. Research and evaluate new technologies to enhance the company's security posture.
7. Identify potential threats and vulnerabilities in our systems and data, as well as help develop and implement solutions to safeguard them.
8. Enable cross-functional teams to implement security solutions aligned with Trust-by-Design principles.
9. Contribute to security education and awareness programs by preparing and delivering training materials across the company.
10. Shape strategies to automate and scale application and product security efforts.

Qualifications

Experience:

1. 5 years of professional experience in cybersecurity, with a deep background in application development and application security, data encryption, and compliance with security standards, as well as knowledge of network and cloud security.
2. Experience in software and infrastructure architecture with a focus on security.
3. Extensive experience with common code and network vulnerabilities, their impacts, and remediation strategies.
4. Background in writing code in at least one programming language, such as Java, Golang, or C#, and a scripting language like Bash or Python.
5. Applied knowledge of cryptography, PKI, TLS, and practical implementations.
6. Experience with threat modeling and Secure Software Development Life Cycles.
7. Experience operationalizing the discovery of code-level vulnerabilities and improving secure coding practices.
8. Experience scanning containers and integrating CI/CD platforms with security tools such as Burpsuite, Checkmarx, Veracode, Webinspect.

*Note: The candidate must pass a coding test.

Education:

1. Bachelor’s degree or equivalent experience

Core Competencies:

1. Lead with Curiosity & Humility
2. Build High Performing Teams for Today & Tomorrow
3. Influence & Inspire with Vision & Purpose
4. Observe, Engage & Connect
5. Strive to Achieve Operational Excellence
6. Deliver Business Results

Benefits:

Bath & Body Works associates are the heart of our business. That’s why we’re proud to offer benefits that empower you to Dream Bigger & Live Brighter. Benefits for eligible associates include:

1. Robust medical, pharmacy, dental and vision coverage. Plus, access to our onsite wellness center and pharmacy located at the Columbus, OH home office.
2. 401k with company match and Associate Stock Purchase program with discount
3. No-cost mental health and wellbeing support through our Employee Assistance Program (EAP)
4. Opportunity for paid time off and paid parental leave. Plus, access to family and lifestyle programs including an inclusive family building benefit, childcare discounts, and home, auto and pet insurance.
5. Tuition reimbursement and scholarship opportunities for post-secondary education programs
6. 40% merchandise discount and gratis that encourages you to come back to your senses!

Visit bbwbenefits.com for more details.

The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all responsibilities, duties and skills required.

We will consider for employment all qualified applicants, including those with arrest records, conviction records, or other criminal histories, in a manner consistent with the requirements of any applicable state and local laws. Please see links: Los Angeles Fair Chance In Hiring Ordinance, Philadelphia Fair Chance Law, San Francisco Fair Chance Ordinance.

We are an equal opportunity and affirmative action employer. We do not make employment decisions based on an individual’s race, color, religion, gender, gender identity, national origin, citizenship, age, disability, sexual orientation, marital status, pregnancy, genetic information, protected veteran status or any other legally protected status, and we comply with all laws concerning nondiscriminatory employment practices. We are committed to providing reasonable accommodations for associates and job applicants with disabilities. Our management team is dedicated to ensuring fulfillment of this policy with respect to recruitment, hiring, placement, promotion, transfer, training, compensation, benefits, associate activities and general treatment during employment. We only hire individuals authorized for employment in the United States.

Application window will close when all role(s) are filled.