Lead Application Security Engineer - 19562 - East Point - Cox Automotive

    Cox Automotive
    Cox Automotive East Point

    1 day ago

    $122,400 (USD) per year
    Description
    The Lead Application Security Engineer will partner with Security Engineering Enablement and Security Architecture to design and ship secure software: secure code reviews and help define requirements on prerelease control validation (SAST/DAST/SCA, API security, Container/IaC scans). Drive fix-first coaching-turn findings into clear remediation guidance and code examples, to help teams remediate security findings.

    The team is the Center of Excellence (COE) for Application Security, Web Application Firewalls and Cloud Security. In this capacity, the Lead AppSec Engineer can provide advice and guidance to teams in these areas to support the established standards and policies, in the form of Office Hours, Brown Bags or team consultation sessions.

    Primary Responsibilities:
    • Operate, administer, and continuously improve our off the shelf AppSec and CloudSec tools (WAF infrastructure management, user onboarding, policy/config, integrations).
    • Triage and disposition vulnerabilities across SAST/DAST/SCA/API/IaC/CSPM sources; lead false positive reviews and suppression/exception workflows with strong audit trails.
    • Partner with Cloud Platform teams to harden AWS/Azure/GCP environments using CSPM/CNAPP controls, guardrails, and baselines; guide secure patterns for serverless, containers/Kubernetes, and secrets management.
    • Support system administration, configuration, and maintenance for the AppSec/CloudSec/WAF toolset (identity/roles, agent health, connectors, backups, upgrades, and DR testing).
    • Evaluate security tools on an ongoing basis, to ensure we are leveraging the best toolset that meets the enterprise's needs
    • Serve as first-line triage for Responsible Disclosure submissions, reproduce issues, determine severity/impact, assign owners/SLAs, and track to closure.
    • Ensure consistent communications with Responsible Disclosure reporters and internal stakeholders and maintain accurate records for compliance.
    • Use scripting/automation (Python, PowerShell, Bash, REST APIs, Terraform modules, GitHub Actions/Azure DevOps/GitLab CI) for ad hoc fixes and to reduce toil (bulk policy changes, project provisioning, baseline exceptions, report consolidation).
    • Stakeholder for helping design Secure Pipelines to be implemented by the Security Engineering Enablement team
    Minimum Qualifications:
    • Bachelor's degree in a related discipline and 6 years' experience in a related field. The right candidate could also have a different combination, such as a master's degree and 4 years' experience; a Ph.D. and 1 year of experience; or 18 years' experience in a related field
    • 2 years in Application / Product security or software engineering with a strong security focus.
    • Hands on depth with modern SDLC/DevSecOps in cloud-native environments: microservices, APIs, containers/Kubernetes, serverless, IaC (Terraform/CloudFormation/ARM/Bicep), and CI/CD integration.
    • Practical expertise operating and tuning SAST, DAST, SCA, API testing, IaC/container scanners, plus CNAPP for multi cloud.
    • Scripting/automation proficiency (Python preferred; PowerShell/Bash nice) and REST API integration skills; able to create quick utilities and pipeline jobs to reduce manual effort.
    • Strong knowledge of OWASP Top 10, ASVS, SAMM, NIST SSDF, CSA CCM, secure design patterns, cryptography fundamentals, authN/Z (OAuth2/OIDC/JWT), and common web/API vulns and mitigations.
    • Experience triaging responsible disclosure or bug bounty reports and driving coordinated remediation with product teams.
    • Excellent communicator who can simplify complex risk for engineers and leaders; bias to action and measurable outcomes.
    • Familiarity with software supply chain security (SBOMs, signing, provenance, dependency risk) and runtime protection (RASP, WAF/WL, EDR for containers).
    • Strong understanding of cloud architecture and infrastructure
    • Collaborate with AI agents to build, test, and deploy software across the SDLC, by using proper contextual inputs to improve AI understanding and output quality.
    • Implement AI-powered features and pipelines in our software
    • Contribute to prompt engineering experimentation and share tool usage insights.
    • Define coding standards, review practices, and ethical guidelines for AI use.
    • Mentor peers and coach junior team members on AI-augmented development.
    • Applicants must currently be authorized to work in the United States for any employer without current or future sponsorship. No OPT, CPT, STEM/OPT or visa sponsorship now or in future.
    Preferred skills:
    • WAF engineering experience (policy design, tuning, false positive management, bot/rate limit controls, logging/observability, blue/green rollout).
    • Certifications (e.g., CISSP, CSSLP, GWAPT, GCSA, GCP/AWS/Azure security) are a plus.
    • Experience with API security (OWASP API Top 10), Proactive Threat Response, Responsible Disclosure workflows is a plus.
    USD 122, ,400.00 per year

    Compensation:

    Compensation includes a base salary of $122, $204, The base salary may vary within the anticipated base pay range based on factors such as the ultimate location of the position and the selected candidate's knowledge, skills, and abilities. Position may be eligible for additional compensation that may include an incentive program.

    Benefits:

    The Company offers eligible employees the flexibility to take as much vacation with pay as they deem consistent with their duties, the company's needs, and its obligations; seven paid holidays throughout the calendar year; and up to 160 hours of paid wellness annually for their own wellness or that of family members. Employees are also eligible for additional paid time off in the form of bereavement leave, time off to vote, jury duty leave, volunteer time off, military leave, and parental leave.
  • Work in company

    Security Engineer II

    Only for registered members

    Imagine Your Future with Us Since 1971 Paychex has been at the forefront of simplifying HR payroll and benefits for American businesses. · Our digital HR technology and advisory solutions cater to the changing needs of employers and their employees With our award-winning training ...

    High Point $98,400 - $154,600 (USD)

    4 weeks ago

  • Work in company

    Network Security Engineer

    Only for registered members

    We are seeking a skilled Network Security Engineer to join our team, · responsible for designing, implementing and maintaining secure network infrastructure. ...

    High Point

    3 weeks ago

  • Work in company

    Network Engineer with Security Clearance

    Only for registered members

    Verigent is seeking a Network Engineer specializing in CSfC, you will be responsible for developing, installing, testing and deploying Commercial Solutions for Classified and Cross-Domain architectures for production use in government networks. · Manage and configure networking c ...

    High Point

    1 month ago

  • Work in company

    Voice Engineer with Security Clearance

    Only for registered members

    Voice Engineer Job Description · Job Title: Voice Engineer · CACI's Enterprise IT (EIT) division seeks skilled engineers responsible for leading design, · implementation, · and · optimization, · of voicelifrastructure.<br> · *Designandarchitectvoicecommunicationsystems(includingV ...

    High Point

    4 days ago

  • Work in company

    COMSEC Engineer with Security Clearance

    Only for registered members

    CACI's Enterprise IT (EIT) Sector is seeking a multi-disciplined COMSEC Engineer in support of the Army Comprehensive Modernization program. · A culture of integrity. · An environment of trust. · A focus on continuous growth. · ...

    High Point

    2 weeks ago

  • Work in company

    Cyber Security Engineer

    Only for registered members

    Join a high-impact engineering team supporting the standardization and modernization of information and infrastructure capabilities for the US Army. · ...

    High Point $85,800 - $180,200 (USD) Full time

    1 month ago

  • Work in company

    Senior Cyber Engineer with Security Clearance

    Only for registered members

    About This Role · This is a role that involves developing security plans policies designs tailored for production use within government infrastructures. · Manage Risk Management Framework (RMF) process · Work with system development team to identify needed RMF artifacts load them ...

    High Point

    2 weeks ago

  • Work in company

    IT Security Engineer

    Only for registered members

    Job Description · IT Security Engineer · 4100 Beechwood Dr, Greensboro, NC 27410 · GROFF · Full-time Shift(s): MON TUE WED THU FRI 8:00am - 5:00pm · OVERVIEW: · Working as Full-time IT Security Engineer, you will be responsible for testing, designing and implementing security con ...

    Greensboro, NC $90,000 - $160,000 (USD) per year

    1 day ago

  • Work in company

    ISP/OSP Engineer with Security Clearance

    Only for registered members

    Job Title: ISP/OSP Engineer · Time Type: Full-time Minimum Clearance Required to Start: S</uecret Employee Type: Regular Percentage of Travel Required: Up to 50% Type of Travel: Continental US ...

    High Point $85,000 - $180,200 (USD) per year

    3 days ago

  • Work in company

    Cloud & Virtualization Network Engineer with Security Clearance

    Only for registered members

    Job Title: · Cloud & Virtualization Network Engineer · About The Opportunity · CACI's Enterprise IT Sector is seeking a skilled Cloud Virtualization Engineer to oversee and drive the development and implementation of cloud and virtualization infrastructure. · Design architect clo ...

    High Point

    5 days ago

  • Work in company

    Sr. Network Engineer/Architect with Security Clearance

    Only for registered members

    Sr. Network Engineer/Architect Job Description · CACI seeks an experienced Senior Network Engineer to join our Technical Service Delivery Team. · Design and implement complex network architectures integrating VPNs, firewalls, switching, routing, and IPv4/IPv6 Dual Stack operation ...

    High Point

    5 days ago

  • Work in company

    IT Security Engineer

    Only for registered members

    Job Description · IT Security Engineer · 4100 Beechwood Dr, Greensboro, NC 27410 · GROFF · Full-time Shift(s): MON TUE WED THU FRI 8:00am - 5:00pm · Overview · Working as Full-time IT Security Engineer, you will be responsible for testing, designing and implementing security cont ...

    Greensboro $90,000 - $160,000 (USD) per year

    1 day ago

  • Work in company

    Product Security Engineer

    Only for registered members

    The Product Security Engineer is responsible for conducting comprehensive security assessments on various products. · ...

    Winston-Salem $110,926 - $184,876 (USD) Full time

    3 weeks ago

  • Work in company

    Network Security Engineer

    Only for registered members

    We are seeking a Network Security Engineer to join our team. The ideal candidate will have experience in designing and implementing network security solutions using firewalls, load balancers, and other technologies. · ...

    Greensboro

    4 weeks ago

  • Work in company

    Zscaler Security Engineer

    Only for registered members

    Design implement manage ZPA ZIA solutions secure OT assets ensure seamless access authorized users configure optimize Zscaler policies protect OT environments external threats maintain operational efficiency present non technical teams explain benefits Zscaler Private Access addr ...

    Greensboro, NC

    1 month ago

  • Work in company

    Product Security Engineer

    Only for registered members

    The Product Security Engineer is responsible for conducting comprehensive security assessments on various products, including mobile applications, IoT hardware/firmware, compiled software, and browser extensions. This role involves identifying vulnerabilities, developing mitigati ...

    Headquarters, Winston Salem, NC $87,688 - $110,000 (USD) per year

    5 days ago

  • Work in company Remote job

    Cyber Security Engineer

    Only for registered members

    The Cybersecurity Engineer ensures information assurance and compliance design, integration, implementation modification coordination of the installation testing operation disposition of hardware software systems. · Safeguards information systems by identifying potential actual s ...

    Greensboro, NC

    2 weeks ago

  • Work in company

    Zscaler Security Engineer

    Only for registered members

    +Job summary · Zscaler Security Engineer role involves designing implementing managing ZPA and ZIA solutions to secure OT assets ensuring seamless access for authorized users. · +ResponsibilitiesDesign implement manage ZPA and ZIA solutions. · Configure optimize policies to prote ...

    Greensboro

    1 month ago

  • Work in company

    Information System Security Engineer

    Only for registered members

    LMI is seeking a skilled Information System Security Engineer (ISSE) with hands-on experience in AWS cloud security to provide advanced cybersecurity engineering and Risk Management Framework (RMF) support for Department of Defense (DoD) cloud-based systems. · This position focus ...

    Liberty $90,270 - $155,037 (USD)

    1 week ago

  • Work in company

    Cloud Engineer with Security Clearance

    Only for registered members

    The Cloud Platform Engineer supports the design, development and operation of cloud environments for government customers. · Design and develop cloud architectures that meet customer requirements. · Implement enterprise infrastructure and platforms to support cloud computing envi ...

    Liberty

    1 month ago

Jobs
>
Lead application security engineer 19562
>
Jobs for Lead application security engineer 19562 in High Point