S

Starbucks

Runs coffeehouses and licenses its coffee brand

Senior Application Security Engineer - Security

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeNashville, TN, USANo salary listed

About the Job

Requirements

  • A bachelor's degree in a relevant field or at least five years of equivalent experience in cybersecurity engineering-related roles.
  • At least six years of experience working in an information technology discipline.
  • At least six years of infrastructure or information security experience.
  • At least four years of experience working with infrastructure-as-code technologies.
  • Experience deploying, configuring, and troubleshooting cybersecurity tools in enterprise environments.
  • Certifications such as CISSP, CISSM, or other certifications focused on cybersecurity, data privacy, or information risk management.
  • Advanced knowledge of cybersecurity principles and practices.
  • Experience with firewalls, antivirus software, and intrusion detection systems.
  • Experience with security frameworks and compliance requirements.
  • Proficiency in implementing and managing security controls and technologies.
  • Knowledge of network security protocols and concepts.
  • Familiarity with operating systems and network architectures.
  • In-depth understanding of enterprise-level cybersecurity strategies, frameworks, and technologies.
  • Proficiency in conducting security assessments and audits.
  • Ability to develop and implement security policies and procedures.
  • Experience managing and responding to security incidents.
  • Advanced experience with at least one modern programming language, such as Java, Go, Python, Ruby, C++, or C#.
  • Advanced proficiency interacting with APIs and automating tasks using common scripting languages.

Responsibilities

  • Own application security services, including static application security testing, dynamic application security testing, software composition analysis, penetration testing, bug bounty, and code review.
  • Build and improve application security services, leveraging artificial intelligence-driven capabilities where they can increase speed, accuracy, and scale.
  • Facilitate remediation of threats by partnering with other cybersecurity teams and providing expert analysis and context.
  • Provide expertise in source code management platforms and continuous integration and continuous delivery workflows such as GitHub Enterprise, GitHub Cloud, GitLab, and Azure DevOps, and apply secure cloud deployment workflow practices.
  • Explain and correct issues identified by the OWASP Top 10 and SANS Top 25.
  • Evaluate artificial intelligence-provided analysis for accuracy, risk relevance, and remediation quality, validating outputs before they guide decisions.
  • Recommend modifications and improvements to toolsets, development processes, and production application security support.
  • Contribute to the development and delivery of security training programs.
  • Participate as a key member of security incident response activities.

Desired Qualifications

  • Development expertise in at least two of the following: Python, JavaScript, C#, Java, Scala, Objective-C, Swift, or Kotlin.
  • Understanding of PCI practices and experience working in PCI environments.
  • Experience working with cloud platforms such as AWS and Azure from both developer and security perspectives.
  • Experience working with bug bounty or vulnerability disclosure programs.
  • Certifications such as CEH, CSSLP, CISSP, or GIAC certifications such as GWAPT or GMOB.
  • Experience performing security-focused application design reviews and static and manual code reviews.
  • Experience using common security testing tools and techniques to perform security assessments across multiple platforms, with significant expertise in web or mobile penetration testing.
  • Experience implementing and operating static and dynamic analysis tools.
  • Strong understanding of authentication and authorization options and standards.
  • Knowledge of security vulnerabilities, including identifying vulnerabilities, assessing risk, and providing remediation guidance.
  • Experience working as a software engineer and knowledge of modern web, mobile, and API development practices.
  • Ability to read and write code in multiple programming languages.
  • Experience with Git and GitHub.
  • Knowledge of continuous integration and continuous delivery practices.
  • Experience incorporating security requirements into a software development life cycle.
  • Ability to apply multidisciplinary business principles and practices to achieve successful outcomes in cross-functional projects and activities.
  • Proficiency with Microsoft Word, Excel, and PowerPoint.
  • Ability to work within large collaborative organizations.
  • Knowledge and ability to apply process improvement principles.
  • Ability to balance multiple priorities and meet deadlines.

About the Company

Starbucks

Runs coffeehouses and licenses its coffee brand

Starbucks runs coffeehouses around the world that serve espresso drinks, brewed coffee, tea, and food, and it roasts the arabica coffee its stores sell. It grew from a single Seattle shop selling beans into the world's largest coffeehouse chain, and it helped make Italian-style espresso drinks such as lattes an everyday habit in the United States. Customers order at the counter, at drive-throughs, or ahead through the Starbucks app, whose rewards program trades points for free drinks and food. The company earns money from cafés it operates itself and from fees paid by licensed stores in places such as airports and grocery stores. Starbucks was founded in 1971 and is based in Seattle.

Company size
10,001+
Company stage
IPO
Headquarters
Seattle, WA
Founded
1971

Recently Posted Jobs

Explore more opportunities at Starbucks

See more jobs