Lead Application Security Engineer - 19562 - Decatur - Cox Automotive

    Cox Automotive
    Cox Automotive Decatur

    18 hours ago

    $1,220,000 - $2,040,000 (USD) per year
    Description
    The Lead Application Security Engineer will partner with Security Engineering Enablement and Security Architecture to design and ship secure software: secure code reviews and help define requirements on prerelease control validation (SAST/DAST/SCA, API security, Container/IaC scans). Drive fix-first coaching-turn findings into clear remediation guidance and code examples, to help teams remediate security findings.

    The team is the Center of Excellence (COE) for Application Security, Web Application Firewalls and Cloud Security. In this capacity, the Lead AppSec Engineer can provide advice and guidance to teams in these areas to support the established standards and policies, in the form of Office Hours, Brown Bags or team consultation sessions.

    Primary Responsibilities:
    • Operate, administer, and continuously improve our off the shelf AppSec and CloudSec tools (WAF infrastructure management, user onboarding, policy/config, integrations).
    • Triage and disposition vulnerabilities across SAST/DAST/SCA/API/IaC/CSPM sources; lead false positive reviews and suppression/exception workflows with strong audit trails.
    • Partner with Cloud Platform teams to harden AWS/Azure/GCP environments using CSPM/CNAPP controls, guardrails, and baselines; guide secure patterns for serverless, containers/Kubernetes, and secrets management.
    • Support system administration, configuration, and maintenance for the AppSec/CloudSec/WAF toolset (identity/roles, agent health, connectors, backups, upgrades, and DR testing).
    • Evaluate security tools on an ongoing basis, to ensure we are leveraging the best toolset that meets the enterprise's needs
    • Serve as first-line triage for Responsible Disclosure submissions, reproduce issues, determine severity/impact, assign owners/SLAs, and track to closure.
    • Ensure consistent communications with Responsible Disclosure reporters and internal stakeholders and maintain accurate records for compliance.
    • Use scripting/automation (Python, PowerShell, Bash, REST APIs, Terraform modules, GitHub Actions/Azure DevOps/GitLab CI) for ad hoc fixes and to reduce toil (bulk policy changes, project provisioning, baseline exceptions, report consolidation).
    • Stakeholder for helping design Secure Pipelines to be implemented by the Security Engineering Enablement team
    Minimum Qualifications:
    • Bachelor's degree in a related discipline and 6 years' experience in a related field. The right candidate could also have a different combination, such as a master's degree and 4 years' experience; a Ph.D. and 1 year of experience; or 18 years' experience in a related field
    • 2 years in Application / Product security or software engineering with a strong security focus.
    • Hands on depth with modern SDLC/DevSecOps in cloud-native environments: microservices, APIs, containers/Kubernetes, serverless, IaC (Terraform/CloudFormation/ARM/Bicep), and CI/CD integration.
    • Practical expertise operating and tuning SAST, DAST, SCA, API testing, IaC/container scanners, plus CNAPP for multi cloud.
    • Scripting/automation proficiency (Python preferred; PowerShell/Bash nice) and REST API integration skills; able to create quick utilities and pipeline jobs to reduce manual effort.
    • Strong knowledge of OWASP Top 10, ASVS, SAMM, NIST SSDF, CSA CCM, secure design patterns, cryptography fundamentals, authN/Z (OAuth2/OIDC/JWT), and common web/API vulns and mitigations.
    • Experience triaging responsible disclosure or bug bounty reports and driving coordinated remediation with product teams.
    • Excellent communicator who can simplify complex risk for engineers and leaders; bias to action and measurable outcomes.
    • Familiarity with software supply chain security (SBOMs, signing, provenance, dependency risk) and runtime protection (RASP, WAF/WL, EDR for containers).
    • Strong understanding of cloud architecture and infrastructure
    • Collaborate with AI agents to build, test, and deploy software across the SDLC, by using proper contextual inputs to improve AI understanding and output quality.
    • Implement AI-powered features and pipelines in our software
    • Contribute to prompt engineering experimentation and share tool usage insights.
    • Define coding standards, review practices, and ethical guidelines for AI use.
    • Mentor peers and coach junior team members on AI-augmented development.
    • Applicants must currently be authorized to work in the United States for any employer without current or future sponsorship. No OPT, CPT, STEM/OPT or visa sponsorship now or in future.
    Preferred skills:
    • WAF engineering experience (policy design, tuning, false positive management, bot/rate limit controls, logging/observability, blue/green rollout).
    • Certifications (e.g., CISSP, CSSLP, GWAPT, GCSA, GCP/AWS/Azure security) are a plus.
    • Experience with API security (OWASP API Top 10), Proactive Threat Response, Responsible Disclosure workflows is a plus.
    USD 122, ,400.00 per year

    Compensation:

    Compensation includes a base salary of $122, $204, The base salary may vary within the anticipated base pay range based on factors such as the ultimate location of the position and the selected candidate's knowledge, skills, and abilities. Position may be eligible for additional compensation that may include an incentive program.

    Benefits:

    The Company offers eligible employees the flexibility to take as much vacation with pay as they deem consistent with their duties, the company's needs, and its obligations; seven paid holidays throughout the calendar year; and up to 160 hours of paid wellness annually for their own wellness or that of family members. Employees are also eligible for additional paid time off in the form of bereavement leave, time off to vote, jury duty leave, volunteer time off, military leave, and parental leave.

  • Work in company

    Lead Application Security Engineer - 19562

    Cox Automotive

    The Lead Application Security Engineer will partner with Security Engineering Enablement and Security Architecture to design and ship secure software: secure code reviews and help define requirements on prerelease control validation (SAST/DAST/SCA, API security, Container/IaC sca ...

    North Decatur $1,220,000 - $1,224,000 (USD) per year

    18 hours ago

  • Work in company

    Principal Security Operations Engineer

    Only for registered members

    This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Security Operations Principal - REMOTE. This role is critical in ensuring operational excellence within the cybersecurity framework. · In an environment where challenges are consta ...

    Illinois

    3 weeks ago

  • Work in company

    Software Engineer I

    Cox Automotive

    Job Summary · As part of the Cox Automotive family, Central Dispatch is evolving the nation's largest self-managed auto transportation platform. Our logistics solutions connect shippers with a nationwide network of carriers, enabling vehicles to move efficiently across the countr ...

    Decatur $74,000 - $111,000 (USD) per year Full time

    1 day ago

  • Work in company

    Software Engineer I

    Cox Automotive

    Job Summary · As part of the Cox Automotive family, Central Dispatch is evolving the nation's largest self-managed auto transportation platform. Our logistics solutions connect shippers with a nationwide network of carriers, enabling vehicles to move efficiently across the countr ...

    North Decatur $74,000 - $111,000 (USD) per year Full time

    1 day ago

  • Work in company

    Senior Lead Cloud Security Architect

    Cox Automotive

    The Senior Lead Cybersecurity Architect is responsible for defining the principles, standards, and design patterns to build secure products and enterprise tools for all of Cox Automotive's multi-cloud and on-premises environments. This position's architecture focus is on securing ...

    North Decatur $148,000 - $247,000 (USD) per year

    18 hours ago

  • Work in company

    Senior Lead Cloud Security Architect

    Cox Automotive

    The Senior Lead Cybersecurity Architect is responsible for defining the principles, standards, and design patterns to build secure products and enterprise tools for all of Cox Automotive's multi-cloud and on-premises environments. This position's architecture focus is on securing ...

    Decatur $170,000 - $260,000 (USD) per year

    18 hours ago

  • Work in company

    Sourcing Specialist

    Only for registered members

    Sourcing specialist specializes in securing and developing new material sources and suppliers. · ...

    Decatur, IL

    1 month ago

  • Work in company

    Desktop Support Engineer

    Only for registered members

    This Desktop Support Engineer will provide level 1/level 2 support for desktops laptops mobile devices and peripherals diagnose and resolve issues related to windows/macos operating systems install configure and upgrade software hardware components troubleshoot network connectivi ...

    Decatur

    1 month ago

  • Work in company

    Azure Databricks Lead

    Only for registered members

    Job Title- Azure Databricks Lead · Location- Decatur, IL (Onsite) · Job Summary · We are looking for a Data Replication Specialist with expertise in Microsoft Fabric and Databricks Lake flow connect to design implement and manage data replication and synchronization solutions acr ...

    Decatur $155,000 - $235,000 (USD) per year

    5 days ago

  • Work in company

    Azure Databricks Lead

    Only for registered members

    We are looking for a Data Replication Specialist with expertise in Microsoft Fabric and Databricks Lakeflow connect to design implement and manage data replication and synchronization solutions across multiple data environments The ideal candidate will ensure that businesscritica ...

    Decatur $155,000 - $235,000 (USD) per year

    1 week ago

  • Work in company

    Azure Databricks Engineer

    Only for registered members

    Azure Databricks Engineer · Decatur, Illinois Onsite · We are looking for a Data Replication Specialist with expertise in Microsoft Fabric and Databricks Lake flow connect to design implement and manage data replication and synchronization solutions across multiple data environ ...

    Decatur $105,000 - $170,000 (USD) per year

    1 day ago

  • Work in company

    Automation and Controls Engineer

    Only for registered members

    The Controls Engineer performs engineering design and installation services for automated process equipment, facility systems, · and software systems. The incumbent performs troubleshooting and corrective maintenance with production equipment at Rising facilities.Routinely mainta ...

    Decatur, IL

    1 month ago

  • Work in company

    Automation and Controls Engineer

    Enormous Enterprise LLC

    Position Title: Automation and Controls Engineer · Department: Engineering · Reports To: Head of Engineering · Work Location: Decatur, Illinois · Position Summary: · • The Controls Engineer performs engineering design and installation services for automated process equipment, fac ...

    Decatur

    1 day ago

  • Work in company

    Mechanical Design Engineer

    Only for registered members

    A Mechanical Design Engineer will act as the design engineer for Large Mining Trucks' steering arms linkages front/rear axles and heavy fabrications lead on-site factory design/development efforts for new product introduction and design for manufacturing projects provide factory ...

    Decatur, IL

    2 weeks ago

  • Work in company

    Engineering - General - Design Engineer 4

    Only for registered members

    The main function of a design engineer is to apply the principles of computer science and mathematical analysis to the design, development, testing, · and evaluation of the software and systems that make computers work.DIRECT PROGRAMMERS AND ANALYSTS TO MAKE CHANGES TO EXISTING D ...

    Decatur

    3 weeks ago

  • Work in company

    Sourcing Specialist

    Only for registered members

    We are looking for a Sourcing Specialist to secure and develop new material sources and suppliers. · ...

    Decatur

    1 month ago

  • Work in company

    Engineering Intern

    Only for registered members

    Job summary:Engineering Intern · Thank you for your interest in Mueller Water Products, Inc. · For more than 165 years, · Mueller Water Products, Inc.has been building the future of water infrastructure.From lifesaving fire protection to data intelligence, · we are committed to d ...

    Decatur

    1 month ago

  • Work in company

    Mechanical Design Engineer

    Only for registered members

    This Mechanical Design Engineer will act as the design engineer for Large Mining Trucks' steering arms linkages front rear axles and heavy fabrications lead on site factory design development efforts for new product introduction and design for manufacturing projects provide facto ...

    Decatur

    2 weeks ago

  • Work in company

    Manufacturing Engineer

    Only for registered members

    The Manufacturing Engineer has the primary responsibility of developing, defining, and implementing new technology and improvements to manufacturing processes. · The position will be responsible for reducing manufacturing costs, implementing new products into manufacturing, and p ...

    Decatur $67,568 - $92,906 (USD)

    3 weeks ago

  • Work in company

    Director of Procurement

    Only for registered members

    · Full-time · Description · Company Background · TCCI Manufacturing is a world leader in compressor technology for commercial vehicles, automotive and same-day delivery vehicles. Our global footprint spans seven locations across the US, China, India, Germany, Ireland, Spain, and ...

    Decatur, IL $150,000 - $260,000 (USD) per year

    1 week ago

Jobs
>
Lead application security engineer 19562
>
Jobs for Lead application security engineer 19562 in Decatur