Lead Application Security Engineer - 19562 - Mableton - Cox Automotive

    Cox Automotive
    Cox Automotive Mableton

    7 hours ago

    $1,220,000 - $1,524,000 (USD) per year
    Description
    The Lead Application Security Engineer will partner with Security Engineering Enablement and Security Architecture to design and ship secure software: secure code reviews and help define requirements on prerelease control validation (SAST/DAST/SCA, API security, Container/IaC scans). Drive fix-first coaching-turn findings into clear remediation guidance and code examples, to help teams remediate security findings.

    The team is the Center of Excellence (COE) for Application Security, Web Application Firewalls and Cloud Security. In this capacity, the Lead AppSec Engineer can provide advice and guidance to teams in these areas to support the established standards and policies, in the form of Office Hours, Brown Bags or team consultation sessions.

    Primary Responsibilities:
    • Operate, administer, and continuously improve our off the shelf AppSec and CloudSec tools (WAF infrastructure management, user onboarding, policy/config, integrations).
    • Triage and disposition vulnerabilities across SAST/DAST/SCA/API/IaC/CSPM sources; lead false positive reviews and suppression/exception workflows with strong audit trails.
    • Partner with Cloud Platform teams to harden AWS/Azure/GCP environments using CSPM/CNAPP controls, guardrails, and baselines; guide secure patterns for serverless, containers/Kubernetes, and secrets management.
    • Support system administration, configuration, and maintenance for the AppSec/CloudSec/WAF toolset (identity/roles, agent health, connectors, backups, upgrades, and DR testing).
    • Evaluate security tools on an ongoing basis, to ensure we are leveraging the best toolset that meets the enterprise's needs
    • Serve as first-line triage for Responsible Disclosure submissions, reproduce issues, determine severity/impact, assign owners/SLAs, and track to closure.
    • Ensure consistent communications with Responsible Disclosure reporters and internal stakeholders and maintain accurate records for compliance.
    • Use scripting/automation (Python, PowerShell, Bash, REST APIs, Terraform modules, GitHub Actions/Azure DevOps/GitLab CI) for ad hoc fixes and to reduce toil (bulk policy changes, project provisioning, baseline exceptions, report consolidation).
    • Stakeholder for helping design Secure Pipelines to be implemented by the Security Engineering Enablement team
    Minimum Qualifications:
    • Bachelor's degree in a related discipline and 6 years' experience in a related field. The right candidate could also have a different combination, such as a master's degree and 4 years' experience; a Ph.D. and 1 year of experience; or 18 years' experience in a related field
    • 2 years in Application / Product security or software engineering with a strong security focus.
    • Hands on depth with modern SDLC/DevSecOps in cloud-native environments: microservices, APIs, containers/Kubernetes, serverless, IaC (Terraform/CloudFormation/ARM/Bicep), and CI/CD integration.
    • Practical expertise operating and tuning SAST, DAST, SCA, API testing, IaC/container scanners, plus CNAPP for multi cloud.
    • Scripting/automation proficiency (Python preferred; PowerShell/Bash nice) and REST API integration skills; able to create quick utilities and pipeline jobs to reduce manual effort.
    • Strong knowledge of OWASP Top 10, ASVS, SAMM, NIST SSDF, CSA CCM, secure design patterns, cryptography fundamentals, authN/Z (OAuth2/OIDC/JWT), and common web/API vulns and mitigations.
    • Experience triaging responsible disclosure or bug bounty reports and driving coordinated remediation with product teams.
    • Excellent communicator who can simplify complex risk for engineers and leaders; bias to action and measurable outcomes.
    • Familiarity with software supply chain security (SBOMs, signing, provenance, dependency risk) and runtime protection (RASP, WAF/WL, EDR for containers).
    • Strong understanding of cloud architecture and infrastructure
    • Collaborate with AI agents to build, test, and deploy software across the SDLC, by using proper contextual inputs to improve AI understanding and output quality.
    • Implement AI-powered features and pipelines in our software
    • Contribute to prompt engineering experimentation and share tool usage insights.
    • Define coding standards, review practices, and ethical guidelines for AI use.
    • Mentor peers and coach junior team members on AI-augmented development.
    • Applicants must currently be authorized to work in the United States for any employer without current or future sponsorship. No OPT, CPT, STEM/OPT or visa sponsorship now or in future.
    Preferred skills:
    • WAF engineering experience (policy design, tuning, false positive management, bot/rate limit controls, logging/observability, blue/green rollout).
    • Certifications (e.g., CISSP, CSSLP, GWAPT, GCSA, GCP/AWS/Azure security) are a plus.
    • Experience with API security (OWASP API Top 10), Proactive Threat Response, Responsible Disclosure workflows is a plus.
    USD 122, ,400.00 per year

    Compensation:

    Compensation includes a base salary of $122, $204, The base salary may vary within the anticipated base pay range based on factors such as the ultimate location of the position and the selected candidate's knowledge, skills, and abilities. Position may be eligible for additional compensation that may include an incentive program.

    Benefits:

    The Company offers eligible employees the flexibility to take as much vacation with pay as they deem consistent with their duties, the company's needs, and its obligations; seven paid holidays throughout the calendar year; and up to 160 hours of paid wellness annually for their own wellness or that of family members. Employees are also eligible for additional paid time off in the form of bereavement leave, time off to vote, jury duty leave, volunteer time off, military leave, and parental leave.

  • Work in company

    Security Engineer

    Only for registered members

    Position: Security Engineer (MSP) · Location: Smyrna, GA (Onsite) · Type: Full-Time · Pay: $90,000 - $115,000 per year · The Security Engineer supports the execution of information security programs both internally and for our clients, helping ensure security initiatives align wi ...

    Smyrna $95,000 - $170,000 (USD) per year

    1 week ago

  • Work in company

    Security Engineer

    Only for registered members

    Position: Security Engineer (MSP) · Location: Smyrna, GA (Onsite) · Type: Full-Time · Pay: $90,000 - $115,000 per year · The Security Engineer supports the execution of information security programs both internally and for our clients, helping ensure security initiatives align wi ...

    Smyrna, GA $95,000 - $170,000 (USD) per year

    1 week ago

  • Work in company

    IT Security Engineer

    Only for registered members

    The IT Security Engineer is responsible for supporting and advancing the organization's cybersecurity program within a regulated healthcare environment. This role involves engineering, operating and continuously improving security controls across WellStreet's hybrid cloud and on- ...

    Atlanta, GA

    3 weeks ago

  • Work in company

    Lead Application Security Engineer - 19562

    Cox Automotive

    The Lead Application Security Engineer will partner with Security Engineering Enablement and Security Architecture to design and ship secure software: secure code reviews and help define requirements on prerelease control validation (SAST/DAST/SCA, API security, Container/IaC sca ...

    Austell $122,400 (USD) per year

    7 hours ago

  • Work in company

    Security Engineer

    Only for registered members

    Cortavo is hiring a senior security engineer to design implement and scale security across internal platforms and customer environments. · This role secures on-premises data center and cloud workloads with primary focus on networking identity Microsoft 365 endpoint security and i ...

    Atlanta

    2 weeks ago

  • Work in company

    Security Engineer

    Only for registered members

    We're hiring a Security Engagement Engineer to partner with product, strategy, and engineering teams and ensure solutions meet security and privacy requirements from concept through delivery. · Partner with cross-functional teams to embed security and privacy requirements into in ...

    Atlanta

    2 weeks ago

  • Work in company

    Security Engineer

    Only for registered members

    This individual will enable key business initiatives by partnering with cross-functional project teams and providing guidance on security and privacy requirements. · The Cybersecurity Sr. Engineer is involved with a solution from concept to completion, ensuring the architecture s ...

    Atlanta

    3 weeks ago

  • Work in company

    Senior Information Security Engineer

    Only for registered members

    Job Title: Senior Information Security Engineer · Location: Remote · Job Type: Full-time · Department: Information Security / IT · Reports To: Director of Information Security / CISO · Job Summary: · We are seeking a highly skilled and experienced Senior Information Security Engi ...

    Powder Springs, Georgia, United States

    6 hours ago

  • Work in company

    Security Engineer

    Only for registered members

    The Security Engineer will collaborate with multiple teams to support data protection, architecting, implementing, documenting, and maintaining Data Protection technologies such as BitLocker endpoint encryption. The team seeks a self-motivated individual who is always looking for ...

    Atlanta

    3 weeks ago

  • Work in company

    Security Engineer

    Only for registered members

    The Security Engineer role serves as a technical engineer within one of the NuHarbor Managed Services Pods. · Maintains industry and vendor certifications required to support the Managed Services catalog. · Regularly meet with clients to drive forward engineering objectives. · ...

    Atlanta $120,000 - $145,000 (USD)

    1 month ago

  • Work in company

    Security Engineer

    Only for registered members

    Are you seeking to work on a team of professionals protecting one of the world's largest global air lines? As a Data Protection Engineer at Delta Air Lines you'll be collaborating with multiple teams to support data protection. · ...

    Atlanta

    1 month ago

  • Work in company

    Security Engineer

    Only for registered members

    We're partnered with a well-established organization in the Atlanta area that's investing in a full modernization of its security environment. · This is a hands-on, high-impact role for a security professional who wants ownership, influence and the opportunity to help build the f ...

    Atlanta

    1 month ago

  • Work in company

    Security Engineer

    Only for registered members

    We are seeking a Security Software Engineer to join our team at Rivian. · As a Security Software Engineer at Rivian, you will sit at the intersection of cybersecurity, software engineering, and artificial intelligence. Your role is not just to ...

    Atlanta $88,300 - $131,400 (USD) Full time

    3 weeks ago

  • Work in company

    Security Engineer

    Only for registered members

    Job Title: Sr. Security Engineer ( Intune, Purview, BitLocker, 365 ) · Location: Atlanta, GA 30354 · Duration: 12 Months contract · Top 5 skills are as follows: · Microsoft Intune · Microsoft BitLocker Administrator · Microsoft Purview · Microsoft 365 · Microsoft Azure · Require ...

    Atlanta $95,000 - $170,000 (USD) per year

    1 day ago

  • Work in company

    Security Engineer

    Only for registered members

    Orange Business is seeking a highly motivated customer-oriented Mid-Level Network Security Engineer to join our team. · Create technically detailed reports on firewall block lists device status change management hardwaresoftware upgrades and other areas · Analyze and evaluate ano ...

    Atlanta OTHER

    1 month ago

  • Work in company

    Security Engineer

    Only for registered members

    +h2>Job summary · p>Join Orange Business as a Network Security Engineer in our team dedicated to providing consistent, sustainable global solutions./p> +ul>li>Create technically detailed reports on firewall block lists/li>/ul>+li>Analyze and evaluate anomalous network and system ...

    Atlanta

    1 month ago

  • Work in company

    Security Engineer

    Only for registered members

    Proda Technology is a dynamic and fast-growing Managed IT and Security Services Provider headquartered in Atlanta, GA. For over 15 years, we've partnered with organizations to deliver strategic technology solutions that create lasting impact. We're proud to be recognized as a 202 ...

    Atlanta $95,000 - $170,000 (USD) per year

    1 week ago

  • Work in company

    Security Engineer

    Only for registered members

    Rivian is on a mission to keep the world adventurous forever. This goes for the emissions-free Electric Adventure Vehicles we build, and the curious, courageous souls we seek to attract. · As a Security Software Engineer at Rivian, you will sit at the intersection of cybersecurit ...

    Atlanta $105,100 - $131,400 (USD)

    3 weeks ago

  • Work in company

    Security Engineer

    Only for registered members

    +The Security Engineer serves as a trusted advisor and subject matter expert to clients and guides senior leadership through managing business impacts and risk mitigation associated with a cyber incident or data breach ensuring client satisfaction. · Sit with business and enginee ...

    Atlanta

    3 weeks ago

  • Work in company

    Lead Application Security Engineer - 19562

    Cox Automotive

    The Lead Application Security Engineer will partner with Security Engineering Enablement and Security Architecture to design and ship secure software: secure code reviews and help define requirements on prerelease control validation (SAST/DAST/SCA, API security, Container/IaC sca ...

    Lithia Springs $122,400 (USD) per year

    7 hours ago

Jobs
>
Lead application security engineer 19562
>
Jobs for Lead application security engineer 19562 in Mableton