Talent.com
Lead Application Security Engineer - 19562
Lead Application Security Engineer - 19562Cox Automotive • Redan, GA, US
Lead Application Security Engineer - 19562

Lead Application Security Engineer - 19562

Cox Automotive • Redan, GA, US
10 hours ago
Job type
  • Full-time
Job description

The Lead Application Security Engineer will partner with Security Engineering Enablement and Security Architecture to design and ship secure software : secure code reviews and help define requirements on prerelease control validation (SAST / DAST / SCA, API security, Container / IaC scans). Drive fix-first coaching-turn findings into clear remediation guidance and code examples, to help teams remediate security findings.

The team is the Center of Excellence (COE) for Application Security, Web Application Firewalls and Cloud Security. In this capacity, the Lead AppSec Engineer can provide advice and guidance to teams in these areas to support the established standards and policies, in the form of Office Hours, Brown Bags or team consultation sessions.

Primary Responsibilities :

  • Operate, administer, and continuously improve our off the shelf AppSec and CloudSec tools (WAF infrastructure management, user onboarding, policy / config, integrations).
  • Triage and disposition vulnerabilities across SAST / DAST / SCA / API / IaC / CSPM sources; lead false positive reviews and suppression / exception workflows with strong audit trails.
  • Partner with Cloud Platform teams to harden AWS / Azure / GCP environments using CSPM / CNAPP controls, guardrails, and baselines; guide secure patterns for serverless, containers / Kubernetes, and secrets management.
  • Support system administration, configuration, and maintenance for the AppSec / CloudSec / WAF toolset (identity / roles, agent health, connectors, backups, upgrades, and DR testing).
  • Evaluate security tools on an ongoing basis, to ensure we are leveraging the best toolset that meets the enterprise's needs
  • Serve as first-line triage for Responsible Disclosure submissions, reproduce issues, determine severity / impact, assign owners / SLAs, and track to closure.
  • Ensure consistent communications with Responsible Disclosure reporters and internal stakeholders and maintain accurate records for compliance.
  • Use scripting / automation (Python, PowerShell, Bash, REST APIs, Terraform modules, GitHub Actions / Azure DevOps / GitLab CI) for ad hoc fixes and to reduce toil (bulk policy changes, project provisioning, baseline exceptions, report consolidation).
  • Stakeholder for helping design Secure Pipelines to be implemented by the Security Engineering Enablement team

Minimum Qualifications :

  • Bachelor's degree in a related discipline and 6 years' experience in a related field. The right candidate could also have a different combination, such as a master's degree and 4 years' experience; a Ph.D. and 1 year of experience; or 18 years' experience in a related field
  • 2 years in Application / Product security or software engineering with a strong security focus.
  • Hands on depth with modern SDLC / DevSecOps in cloud-native environments : microservices, APIs, containers / Kubernetes, serverless, IaC (Terraform / CloudFormation / ARM / Bicep), and CI / CD integration.
  • Practical expertise operating and tuning SAST, DAST, SCA, API testing, IaC / container scanners, plus CNAPP for multi cloud.
  • Scripting / automation proficiency (Python preferred; PowerShell / Bash nice) and REST API integration skills; able to create quick utilities and pipeline jobs to reduce manual effort.
  • Strong knowledge of OWASP Top 10, ASVS, SAMM, NIST SSDF, CSA CCM, secure design patterns, cryptography fundamentals, authN / Z (OAuth2 / OIDC / JWT), and common web / API vulns and mitigations.
  • Experience triaging responsible disclosure or bug bounty reports and driving coordinated remediation with product teams.
  • Excellent communicator who can simplify complex risk for engineers and leaders; bias to action and measurable outcomes.
  • Familiarity with software supply chain security (SBOMs, signing, provenance, dependency risk) and runtime protection (RASP, WAF / WL, EDR for containers).
  • Strong understanding of cloud architecture and infrastructure
  • Collaborate with AI agents to build, test, and deploy software across the SDLC, by using proper contextual inputs to improve AI understanding and output quality.
  • Implement AI-powered features and pipelines in our software
  • Contribute to prompt engineering experimentation and share tool usage insights.
  • Define coding standards, review practices, and ethical guidelines for AI use.
  • Mentor peers and coach junior team members on AI-augmented development.
  • Preferred skills :

  • WAF engineering experience (policy design, tuning, false positive management, bot / rate limit controls, logging / observability, blue / green rollout).
  • Certifications (e.g., CISSP, CSSLP, GWAPT, GCSA, GCP / AWS / Azure security) are a plus.
  • Experience with API security (OWASP API Top 10), Proactive Threat Response, Responsible Disclosure workflows is a plus.
  • USD 119,600.00 - 199,400.00 per year

    Compensation :

    Compensation includes a base salary of $119,600.00 - $199,400.00. The base salary may vary within the anticipated base pay range based on factors such as the ultimate location of the position and the selected candidate's knowledge, skills, and abilities. Position may be eligible for additional compensation that may include an incentive program.

    Benefits :

    The Company offers eligible employees the flexibility to take as much vacation with pay as they deem consistent with their duties, the company's needs, and its obligations; seven paid holidays throughout the calendar year; and up to 160 hours of paid wellness annually for their own wellness or that of family members. Employees are also eligible for additional paid time off in the form of bereavement leave, time off to vote, jury duty leave, volunteer time off, military leave, and parental leave.

    Create a job alert for this search

    Application Security Engineer • Redan, GA, US

    Related jobs
    Applications Engineer

    Applications Engineer

    EX2 Technology LLC • Atlanta, Georgia, United States, 30005
    Full-time
    X2 Technology is seeking an Applications Engineer skilled in implementing, maintaining and optimizing complex technical systems, including hardware, software and networks to join our team.As a Appl...Show more
    Last updated: 4 hours ago • New!
    Level 4 Datacenter Technician

    Level 4 Datacenter Technician

    TEKsystems • Fayetteville, GA, United States
    Full-time
    Will work 100% onsite in Fayetteville GA •.Seeking Level 4 Datacenter Technicians •.Team will be handling troubleshooting of large GPU deployments inside of a hyperscale enterprise DC environment in ...Show more
    Last updated: 12 days ago • Promoted
    Investigations Specialist

    Investigations Specialist

    Takeda Pharmaceutical Company Ltd • Social Circle, GA, United States
    Full-time
    By clicking the “Apply” button, I understand that my employment application process with Takeda will commence and that the information I provide in my application will be processed in line with Tak...Show more
    Last updated: 23 days ago • Promoted
    Development Engineer Electronics Defense & Security

    Development Engineer Electronics Defense & Security

    ScioTeq BV • Duluth, GA, US
    Full-time
    ScioTeq Rugged Computing products are designed to meet extreme operating environments governed by MIL STD and EN military specifications. These products are rarely sold as “off the shelf” products.C...Show more
    Last updated: 13 days ago
    Security Officer - Access Control - Part Time

    Security Officer - Access Control - Part Time

    Allied Universal • Covington, GA, United States
    Full-time +1
    Security Officer - Access Control - Part Time.Allied Universal, North America's leading security and facility services company, offers rewarding careers that provide you a sense of purpose.While wo...Show more
    Last updated: 1 day ago • Promoted
    Mammography Tech PRN

    Mammography Tech PRN

    Wellstar Health Systems, Inc. • Griffin, GA, US
    Full-time
    How would you like to work in a place where your contributions and ideas are valued? A place where you can serve with compassion, pursue excellence and honor every voice? At Wellstar, our mission i...Show more
    Last updated: 12 hours ago • Promoted • New!
    Senior Reliability Engineer

    Senior Reliability Engineer

    Takeda Pharmaceutical Company Ltd • Social Circle, GA, United States
    Full-time
    By clicking the “Apply” button, I understand that my employment application process with Takeda will commence and that the information I provide in my application will be processed in line with Tak...Show more
    Last updated: 30+ days ago • Promoted
    Production Engineer I

    Production Engineer I

    Takeda Pharmaceutical Company Ltd • Social Circle, GA, United States
    Full-time
    By clicking the “Apply” button, I understand that my employment application process with Takeda will commence and that the information I provide in my application will be processed in line with Tak...Show more
    Last updated: 30+ days ago • Promoted
    EHS Manager

    EHS Manager

    Wabash • Griffin, GA, United States
    Full-time
    As an EH&S Manager, you will work on a variety of risk reduction, continuous improvement, regulatory, and culture-based projects. Activities include, but are not limited to, daily interaction with a...Show more
    Last updated: 7 days ago • Promoted
    Fabrication Operator 4 - 1st shift

    Fabrication Operator 4 - 1st shift

    Southern States, LLC • Hampton, GA, US
    Full-time
    We treat each other with fairness, respect, and professionalism.We seek out new opportunities, innovate and experiment with new ideas. We work as a team, collaborating with and supporting each ...Show more
    Last updated: 30+ days ago • Promoted
    Travel CT Technologist - $2,182 per week

    Travel CT Technologist - $2,182 per week

    LanceSoft • Braselton, GA, United States
    Permanent
    LanceSoft is seeking a travel CT Technologist for a travel job in Braselton, Georgia.Job Description & Requirements.GE Optima 64 slice , and a 128 slice Siemens X-Ceed. Perfusion (we are a stroke ce...Show more
    Last updated: 7 days ago • Promoted
    Lead Professional Education Coordinator

    Lead Professional Education Coordinator

    Takeda Pharmaceutical Company Ltd • Social Circle, GA, United States
    Full-time
    By clicking the “Apply” button, I understand that my employment application process with Takeda will commence and that the information I provide in my application will be processed in line with Tak...Show more
    Last updated: 9 days ago • Promoted
    Sr. Security Engineer - Hybrid Opportunity (Based in West Des Moines, IA)

    Sr. Security Engineer - Hybrid Opportunity (Based in West Des Moines, IA)

    The Mutual Group • Duluth, GA, US
    Full-time
    We’re looking for a seasoned Senior Security Engineer with 5–10 years of hands-on experience in cybersecurity, with a strong focus on AWS cloud environments. This role demands a deep com...Show more
    Last updated: 6 days ago • Promoted
    Security Officer - Logistics Access Control PT

    Security Officer - Logistics Access Control PT

    Allied Universal • Covington, GA, United States
    Full-time +1
    Security Officer - Logistics Access Control PT.Allied Universal, North America's leading security and facility services company, offers rewarding careers that provide you a sense of purpose.While w...Show more
    Last updated: 3 days ago • Promoted
    Security Officer - Logistics Screener

    Security Officer - Logistics Screener

    Allied Universal • McDonough, GA, United States
    Full-time +1
    Security Officer - Logistics Screener.Allied Universal, North America's leading security and facility services company, offers rewarding careers that provide you a sense of purpose.While working in...Show more
    Last updated: 1 day ago • Promoted
    Director Quality Control

    Director Quality Control

    Takeda Pharmaceutical Company Ltd • Social Circle, GA, United States
    Full-time
    By clicking the “Apply” button, I understand that my employment application process with Takeda will commence and that the information I provide in my application will be processed in line with Tak...Show more
    Last updated: 14 days ago • Promoted
    Lead Application Security Engineer - 19562

    Lead Application Security Engineer - 19562

    Cox Automotive • Peachtree Corners, GA, US
    Full-time
    The Lead Application Security Engineer will partner with Security Engineering Enablement and Security Architecture to design and ship secure software : secure code reviews and help define requiremen...Show more
    Last updated: 10 hours ago • Promoted • New!
    Security Operations Engineer, (Level III- V)

    Security Operations Engineer, (Level III- V)

    Georgia System Operations Corporation • Tucker, GA, US
    Full-time
    This Engineer role, part of GSOC's Security Operations department, is responsible for protecting the cyber assets that support GSOC and GTC's digital operations. The position focuses on cond...Show more
    Last updated: 30+ days ago • Promoted
    Assembler Coordinator

    Assembler Coordinator

    Wabash • Griffin, GA, United States
    Full-time
    The role involves exercising independent judgment and ensuring work is performed at a quality level consistent with Wabash's standard practice. Essential Duties and Responsibilities.To perform a var...Show more
    Last updated: 27 days ago • Promoted
    Associate Engineer

    Associate Engineer

    Staffmark Group • McDonough, GA, United States
    Full-time
    Advance your career with Staffmark and our respected partner located in McDonough, GA! We are looking for an Associate Engineer to become a key part of our dynamic and forward-thinking team.This ex...Show more
    Last updated: 1 day ago • Promoted