Jobs
>
New York City

    Application Security Engineer - New York, United States - eBay Inc.

    Default job background
    Description

    At eBay, we're more than a global ecommerce leader — we're changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. We're committed to pushing boundaries and leaving our mark as we reinvent the future of ecommerce for enthusiasts.

    Our customers are our compass, authenticity thrives, bold ideas are welcome, and everyone can bring their unique selves to work — every day. We're in this together, sustaining the future of our customers, our company, and our planet.

    Join a team of passionate thinkers, innovators, and dreamers — and help us connect people and build communities to create economic opportunity for all.

    About the role and team:

    We are seeking an experienced Application Security Engineer to join our Global Information Security Team.

    You will be instrumental in analyzing the technical solutions and conduct detailed security assessments of our merchants and acquisitions to ensure they align with business objectives and adhere to our organizational security policies and regulatory requirements.

    This role requires a strong foundation in application security, vulnerability management, secure coding practices, and an understanding of the secure software development lifecycle (SDLC).

    What you will accomplish:

    • Collaborate with multi-functional teams to integrate security measures into the SDLC and provide mentorship on secure coding practices.
    • Develop and maintain application security policies, procedures, and standards in line with organizational goals and compliance requirements.
    • Perform regular security reviews, code audits, and dynamic application security testing to identify and address vulnerabilities and manage the tracking and remediation of identified security issues in collaboration with development and operations teams.
    • Provide expert advice on application security to partners and recommend security improvements and stay abreast of the latest security threats, trends, and technologies to continually improve our security posture.
    • Work with compliance teams to ensure that all technical solutions align with relevant industry regulations such as GDPR, HIPAA, PCI-DSS, etc.
    • Document security findings, risk assessments, and remediation strategies in a clear and concise manner and assist in the development of security awareness training programs for developers and other relevant staff.

    What you will bring:

    • Bachelor's or master's degree in computer science, Information Security, or a related field and 8+ years of experience in application security or a related role.
    • Strong understanding of application security principles, OWASP Top 10, and common attack vectors and experience with secure coding practices and security testing tools (SAST, DAST, IAST).
    • Knowledge of the secure software development lifecycle and DevSecOps integration.
    • Familiarity with various programming languages (e.g., Java, C#, Python, JavaScript) and frameworks.
    • Proven track record of handling security projects and work collaboratively with IT and development teams.
    • Relevant security certifications (e.g., GWAPT, GWEB, CEH, OSCP) are preferred.

    #LI-BB1

    The pay range for this position at commencement of employment in California, Washington, or New York is expected in the range below.

    $149,200 - $234,850

    Base pay offered may vary depending on multiple individualized factors, including location, skills, and experience. The total compensation package for this position may also include other elements, including a target bonus and restricted stock units (as applicable) in addition to a full range of medical, financial, and/or other benefits (including 401(k) eligibility and various paid time off benefits, such as PTO and parental leave). Details of participation in these benefit plans will be provided if an employee receives an offer of employment.

    If hired, employees will be in an "at-will position" and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.

    Please see the Talent Privacy Notice for information regarding how eBay handles your personal data collected when you use the eBay Careers website or apply for a job with eBay.

    eBay is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, sexual orientation, gender identity, veteran status, and disability, or other legally protected status. If you have a need that requires accommodation, please contact us at We will make every effort to respond to your request for accommodation as soon as possible. View our accessibility statement to learn more about eBay's commitment to ensuring digital accessibility for people with disabilities.

    Jobs posted with location as "Remote - United States (Excludes: HI, NM)" excludes residents of Hawaii and New Mexico.

    This website uses cookies to enhance your experience. By continuing to browse the site, you agree to our use of cookies. Visit our Privacy Center for more information.



  • Deutsche Telekom AG New York, United States

    Aufgabe · Als Web Application Security Engineer (w/m/d) unterstützt Du unser Betriebsteam bei folgenden Aufgaben: · Konzeption, Implementierung und Betrieb der WAF- (Web Application Firewall), Reverse-Proxy- und Loadbalancing-Systeme · Unterstützung bei Netzwerk- und Security-Th ...


  • HDI Service AG New York, United States

    Ihre Aufgaben: · Verantwortung für den Betrieb und die Architektur der Splunk Infrastruktur · Weiterentwicklung der Splunk Plattform · Technische Beratung und Umsetzung von (Security) Use Cases · Ausbau der Interkonnektivität der Splunk Plattform · Integration, regelmäßige Ü ...


  • HDI Service AG New York, United States

    Ihre Aufgaben: · Betrieb und Weiterentwicklung der technischen Cyber Security Lösungen (z.B. EDR, NDR, SIEM, Vulnerability-Scanning) · Administration von Security Agenten auf Endsystemen · Unterstützung bei der Planung, Installation, Konfiguration und Migration von innovativen ...

  • Alchemy

    Security Engineer

    4 weeks ago


    Alchemy New York, United States

    is to bring blockchain to a billion people. The Alchemy Platform is a world class developer platform designed to make building on the blockchain easy. We've built leading infrastructure in the space, powering over $105 billion in transactions for tens of millions of users in 99% ...

  • Alchemy

    Security Engineer

    3 days ago


    Alchemy New York, United States

    is to bring blockchain to a billion people. The Alchemy Platform is a world class developer platform designed to make building on the blockchain easy. We've built leading infrastructure in the space, powering over $105 billion in transactions for tens of millions of users in 99% ...

  • MedReview Inc.

    Security Engineer

    1 week ago


    MedReview Inc. New York, United States

    WorkingConditions: Full-time (M-F), Office Business Settings. This is an On-Premises position. Monday through Thursday (9-5) and remote on Fridays only . · PositionSummary –The Security Engineer is responsible for securing – maintaining and monitoring MedReview's enterprise infra ...

  • NYC Health Hospitals

    IT Security Engineer

    2 weeks ago


    NYC Health Hospitals New York, United States

    MetroPlus Health provides the highest quality healthcare services to residents of Bronx, Brooklyn, Manhattan, Queens and Staten Island through a comprehensive list of products, including, but not limited to, New York State Medicaid Managed Care, Medicare, Child Health Plus, Excha ...

  • Celonis GmbH

    Security Engineer

    8 hours ago


    Celonis GmbH New York, United States

    We're Celonis, the global leader in Process Mining technology and one of the world's fastest-growing SaaS firms. We believe there is a massive opportunity to unlock productivity by placing data and intelligence at the core of business processes - and for that, we need you to join ...

  • TSR Consulting

    Security Engineer

    2 weeks ago


    TSR Consulting New York, United States

    About TSR: · Make your application after reading the following skill and qualification requirements for this position. · TSR is a relationship-based, customer-focused IT and technical services staffing company. · For over 40 years TSR, Inc. and its wholly owned subsidiary, TSR ...

  • Green Key Resources

    Security Engineer

    1 week ago


    Green Key Resources New York, United States

    Department: Infrastructure Services · StaffTitle: Security Engineer · Reportsto: Director of IT · FLSAStatus: Exempt · WorkingConditions: Full-time (M-F), Office Business Settings. This is an On-Premises position. Monday through Thursday (9-5) and remote on Fridays only (No excep ...

  • CyberTec

    IT Security Engineer

    8 hours ago


    CyberTec New York, United States

    IT Security Engineer, 10 + Years · Work Location: ONSITE, Graybar Building, NYC · Desired Start Date: 3/18/2024 · Duration: 12 Months · Work hours: 40.00 · Business Organization:METROPOLITAN TRANSPORTATION AUTHORITY · Pay Rate $65 · Responsibilities include the following: ...

  • Wallero

    Security Engineer

    2 weeks ago


    Wallero New York, United States

    Title: Security Engineer · Position: Contract · PRIMARY LOCATION: New York · Note: Only who are willing work on our W2 · Description: · Highly motivated self-starter with excellent interpersonal and problem-solving skills · Bachelor s degree or equivalent work experience · Good o ...

  • Figma

    Security Engineer

    8 hours ago


    Figma New York, United States

    Figma is growing our team of passionate people on a mission to make design accessible to all. Born on the Web, Figma helps entire product teams brainstorm, design and build better products - from start to finish. Whether it's consolidating tools, simplifying workflows, or collabo ...

  • Alchemy

    Security Engineer

    19 hours ago


    Alchemy New York, United States

    Our mission is to bring blockchain to a billion people. The Alchemy Platform is a world class developer platform designed to make building on the blockchain easy. We've built leading infrastructure in the space, powering over $105 billion in transactions for tens of millions of u ...

  • Datadog

    Security Engineer

    3 weeks ago


    Datadog New York, United States

    We are looking for a Security Engineer for the Software Integrity and Trust team to build systems that protect Datadog against various forms of supply-chain attacks. · You'll join at an ideal time to make a big impact: supply-chain attacks continue to be one of the fastest growin ...

  • TSR Consulting

    Security Engineer

    8 hours ago


    TSR Consulting New York, United States

    About TSR: · TSR is a relationship-based, customer-focused IT and technical services staffing company. · For over 40 years TSR, Inc. and its wholly owned subsidiary, TSR Consulting Services, have prospered in the Information Technology staffing business, earning the respect of co ...

  • E.L.F. Beauty, Inc.

    IT Security Engineer

    19 hours ago


    E.L.F. Beauty, Inc. New York, United States

    About the Company · e.l.f. Beauty, Inc. stands with every eye, lip, face and paw. Our deep commitment to clean, cruelty free beauty at an incredible value has fueled the success of our flagship brand e.l.f. Cosmetics since 2004 and driven our portfolio expansion. Today, our mult ...

  • MicroData Systems, Inc.

    Security Engineer

    3 weeks ago


    MicroData Systems, Inc. New York, United States

    Job Description · Job DescriptionSecurity Engineer · Your Career · As a Security Engineer you will be responsible for assisting with the log migration and detection strategy of our customers. You will work closely with the technical lead to ensure that all the relevant log sourc ...

  • Datadog

    Security Engineer 2

    2 weeks ago


    Datadog New York, United States

    Security Engineer 2 - Adversary Simulation Operations · New York, New York, USA · We're looking for engineers with a background in offensive security in the areas of Kubernetes and container security, network penetration testing, application security and cloud infrastructure. Ex ...


  • Datadog New York, United States

    Enterprise IT Security Engineer · New York, NY, United States · Description · The Enterprise IT Security team is internally focused with the mission of securing the endpoints, applications, infrastructure, services and networks that Datadog employees rely on on a daily basis. T ...