Sr Application Security Manager

Randstad Digital Americas; Grand Rapids (MI); Remote; USD 160,000 - 180,000; Full time

Job summary

Randstad Digital Americas in West Michigan is seeking a Sr Application Security Engineer with a software development background and several years of IT security experience. This role can be remote in or near Michigan, offering flexible work arrangements.

You will mentor teams, lead security testing, advise executives on threats, and drive remediation with development teams while fostering a culture of security across the organization.

Qualifications

• 4+ years of professional experience, with at least 2 years in a security field and 1 year writing code.
• Familiar with object-oriented programming and languages such as C#, Java, or C++.
• Agile/Scrum, SAFe, or Lean certification preferred.
• Familiarity with OWASP Top 10 and secure coding practices.
• Knowledge of architectures (SPA, client-server, microservices) and cloud/container basics.

Responsibilities

• Develop and present application security topics to technical and non-technical audiences.
• Advise leadership on threats to enable risk-informed decisions.
• Mentor information security team members on application security.
• Coordinate third-party penetration tests, triage findings, and create remediation plans with development teams.
• Provide remediation guidance to developers for security findings.
• Review security of third-party/open-source software.
• Provide risk-based analysis of security posture to drive business decisions.
• Foster relationships with business partners to promote security initiatives.
• Develop internal security tooling to identify or remediate risks.
• Assist or lead on incidents involving application security.

Skills

C#

C++

Java

Object-oriented programming

Education

Bachelor's degree

Job description

Job Summary

Our West Michigan Client has a great opportunity for a Sr Application Security Engineer to join their team. This can be a remote role in or near Michigan. Ideal candidates will have a software development background with several years of IT Security experience.

Job Summary

Our West Michigan Client has a great opportunity for a Sr Application Security Engineer to join their team. This can be a remote role in or near Michigan. Ideal candidates will have a software development background with several years of IT Security experience.

location: Telecommute

job type: Permanent

salary: $160,000 - 180,000 per year

work hours: 8am to 5pm

education: Bachelors

Responsibilities

• Develop and provide presentations on application security topics to both technical and non-technical audiences.
• Advise executive leadership on current and evolving threats to enable risk-informed decisions.
• Mentor members of the information security team on matters of application security.
• Facilitate third-party penetration tests, triage findings, and create remediation plans with development teams.
• Provide tailored remediation guidance to software developers to address security findings.
• Provide architectural and security guidance for third-party platforms and services as they integrate into environments and/or code.
• Review the security of third-party/open-source software.
• Provide risk-based analysis of security posture to drive business decisions.
• Foster relationships with key business partners to create a culture of security and achieve prioritization of security initiatives.
• Develop internal security tooling for identifying or remediating security risks.
• Assist/lead on matters of application security in the event of an incident.

Qualifications

At least four years of professional experience, with at least two years in a security field and at least one year with direct experience writing code.

Familiar with object-oriented programming and have written code in one or more programming languages (e.g. C#, Java, C++).

Agile/Scrum, SAFe, or Lean certification preferred.

Familiarity with secure coding best practices such as the OWASP Top 10.

Knowledge of common application architectures and the relative risks associated with them (e.g. single page apps, client-server, native mobile, microservices).

Foundational knowledge of security practices in several applied contexts, e.g. networking, cloud infrastructure, containerization, operations, audit, or governance.

Knowledge of relevant technology, tools, databases, and development techniques.

Strong focus on team dynamics and interpersonal relationships.

Strong sense of task ownership with consistent follow-through.

Ability to anticipate risks and devise solutions with limited information or context.

Excellent project management, organization, and team collaboration skills.

Curiosity to learn.

Capable of defining and measuring key performance indicators.

Able to work cross-functionally with IT and business partners across all areas and vendor partners.

Adaptive, flexible, and responsive to challenges.

Awareness of how security controls influence both internal stakeholders and customers.

SANS/GIAC, CompTIA, ISC2 (e.g. CISSP) or other applicable industry certifications preferred.

Skills

C#,C++,client-server,cloud infrastructure,information security,databases,open-source software,Computer Science,Java,microservices,object-oriented programming,OWASP Top 10,programming languages,Agile/Scrum,secure coding practices,secure coding,writing code,software development,software development life cycle (SDLC),Application Security,penetration tests,Adaptive,Curiosity,audit,continuous improvement,CISSP,CompTIA,Advise,presentations,development techniques,governance,remediation plans,key performance indicators,Lean certification,Lean,mentor team members,Mentor,proactive leadership,collaboration skills,project management,risk,risks,security,security controls,security posture,security practices,threat modeling,triage

Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.

Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility).

This posting is open for thirty (30) days.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.