The company's mission is to deliver world class enterprise software to help restaurant chains thrive in the face of increasing complexity, opportunities, and challenges.We are looking for an Application Security Engineer to lead efforts in securing our software stack, containers, and cloud environments.
This is an exciting opportunity for someone who thrives at the intersection of development, security, and operations, bringing innovative solutions to safeguard our applications and infrastructure.What you'll do:? Application & Container Security:– Review and secure application designs, development practices, and deployment pipelines.– Harden containerized environments (Docker, Kubernetes) to mitigate security risks.– Implement tools and processes for secure CI/CD pipelines and integrate DevSecOps principles.? Penetration Testing:Organize and execute infrastructure tests across:– Our corporate infrastructure (identity, SaaS, endpoints)– Our product (AWS cloud and on-premise devices)– Our software (containers and applications)? Cloud Security:– Secure AWS infrastructure with a focus on serverless architectures, IAM policies, and ECS configurations.– Design and maintain security controls to protect data, applications, and systems in the cloud.? Vulnerability Management:– Conduct vulnerability assessments across applications and containers.– Collaborate with engineering teams to remediate software vulnerabilities.– Establish processes to track and manage vulnerabilities throughout the software lifecycle.? Threat Detection & Incident Response:– Develop monitoring systems for application-specific threats.– Lead investigations into application-related security incidents, including triage and root-cause analysis.? Collaboration & Enablement:– Support other operational activities within our infrastructure ranging from identity, device management, SaaS security.– Work closely with Monitoring to identify and triage vulnerabilities within infrastructure.– Support compliance efforts by organizing meetings, collecting evidence, and addressing findings.– Partner with developers to implement secure coding practices and provide training as needed.– Act as a resource for secure API design, encryption practices, and data protection strategies.? Optimization & Innovation:– Build and optimize security workflows using no-code/low-code tools where applicable.– Automate repetitive tasks to enhance development velocity and maintain a strong security posture.Requirements:? 3+ years of experience in application security or related roles with demonstrated knowledge of AWS, Docker, and Kubernetes.? Demonstrable expertise in penetration tests, vulnerability assessment, and security monitoring? Proficiency in scripting or programming languages (Python, JavaScript, or similar) for automation and tooling.? Hands-on experience with CI/CD pipelines and integrating security tools (e.g., SAST, DAST)? Familiarity with compliance frameworks such as SOC 2, PCI, and ISO, with a focus on their application to software development.? Strong communication skills with the ability to bridge gaps between development and security teams.? Passion for enabling secure development practices and improving team velocity.