Principal App Security Engineer

3 days ago

Atlanta, United States Focus Brands Full time

Essential Functions Application Development Lifecycle SecurityIndependently ensure that identified software defects are properly triaged for false positives, correctly prioritized based on criticality, and mitigated.Automate the discovery, profiling, and continuous security monitoring of code.Responsible for integrating the security toolset into the CI/CD pipeline.Responsible for managing the current application security toolset and advising management on improvements. Accountable for managing our software supply chain by defining, documenting, and updating the program to include discovery and reporting of software bill of materials (sbom).Accountable for inventory, document, monitor, and secure production APIs.Accountable for conducting threat assessments, building threat models, and creating remediation plans based on the results of threat assessments.Perform or facilitate the performance of security risk assessments.Perform RFI and engage web application penetration testers as needed and by policy.Anticipate need, initiate, and guide discussions on security strategy and architecture changes.Work with the privacy function to implement data protection requirements. Vulnerability Disclosure ProgramResponsible for managing vulnerabilities identified by independent researchers and vetting them for accuracy.Independently assess the vulnerabilities against risk and criticality, then manage them alongside other security defects. Additional responsibilitiesDefine and develop the Application Security strategy and roadmap across people, process, and technology.Create and perform necessary testing, scanning, and remediation of our internet-facing web applications with respect to compliance with Americans and Disabilities Act (ADA)Configure, troubleshoot, and manage the development environment Identity and Access ManagementEnsure that development and production application assets in the cloud are configured to support security policies including those for data at rest and data in transit. Where assigned, manage the relationship with the vendor, including contract review and negotiation, performing quarterly business reviews, and creating performance and other reporting metrics.Design security compliance metrics that align with Application Security requirements and assist with driving enforcement.Assist with triaging potential security incidents Job Summary Focus Brands is on a journey to build out an industry leading Digital Platform which will power its seven existing brands and enable smooth integration of future brands. The Application Security Engineer, Principal performs a critical role in our roadmap to deliver the most secure, privacy-focused, and compliant customer-facing brand websites. Although the role is a part of the Information Security organization, the experienced incumbent will be embedded with development teams and data scientists and collaborate effectively with various teams within technology and product, and will be responsible and accountable for creating programs and driving the performance of secure software development practices, including addressing vulnerabilities and software security defects, and documenting and managing software supply chain threats and risks. This opportunity will reward the incumbent with a chance to originate security programs, tasks, and methodologies to enable Focus Brands to build products to allow more customers to enjoy our iconic brands. Travel Requirements

  • Principal App Security Engineer

    3 weeks ago

    Atlanta, United States Focus Brands Full time

    Essential Functions Application Development Lifecycle Security – Independently ensure that identified software defects are properly triaged for false positives, correctly prioritized based on criticality, and mitigated. Automate the discovery, profiling, and continuous security monitoring of code. Responsible for integrating the security toolset into the...

  • Principal Security Engineer

    4 weeks ago

    Atlanta, United States Navy Federal Credit Union Full time

    Overview We are seeking a highly skilled and experienced Principal Cybersecurity Engineer to lead the design, implementation, and optimization of our web security infrastructure. This role will focus on advanced Bot defense, Application and API protection, and secure web delivery leveraging Akamai, Cequence and related technologies. The ideal candidate will...

  • Principal Product Manager

    1 week ago

    Atlanta, United States Home Depot Full time

    Principal Product Manager With a career at The Home Depot, you can be yourself and also be part of something bigger. Position Purpose: This Principal Product Manager will lead strategy & scope definition for the Home Depot mobile app ecosystem, including the Hubspace smart home app as it relates to the Home Depot app and site. Key Responsibilities: 10%...

  • Principal Information Security Engineer

    1 week ago

    Atlanta, GA, United States ServiceNow Full time

    It all started in sunny San Diego, California in 2004 when a visionary engineer, Fred Luddy, saw the potential to transform how we work. Fast forward to today - ServiceNow stands as a global market leader, bringing innovative AI-enhanced technology to over 8,100 customers, including 85% of the Fortune 500®. Our intelligent cloud-based platform seamlessly...

  • Principal Software Engineer

    2 weeks ago

    Atlanta, United States ByteLight Full time

    Job Summary QSC is a global leader in full-stack AV solutions, delivering cutting-edge technology that transforms collaboration and physical experiences across corporate, education, hospitality, entertainment, and other markets. With a reputation for innovation, quality, and customer‑first service, QSC is one of the fastest‑growing companies in the...

  • Principal Network Engineer Global WAN, Security

    22 hours ago

    Atlanta, United States Vivid Resourcing Full time

    A leading technology staffing firm is looking for a Principal Network Engineer to manage and support the design, installation, and troubleshooting of enterprise network infrastructure across North/South America. The ideal candidate should have strong skills in security/firewall management, LAN/WAN routing, and experience with various network technologies....

  • Principal Offensive Security Engineer

    6 days ago

    Atlanta, GA, United States Autodesk Full time

    Job Requisition ID # 25WD91774 Position Overview Are you passionate about computers, software, and the art of dismantling code, devices-even cars? Do you love protecting people from digital threats, whether they come from cybercriminals or simple human error? If you've ever read 2600 or celebrated the Phrack anniversary edition at DEFCON33, we might have the...

  • Principal Offensive Security Engineer

    1 week ago

    Atlanta, GA, United States Autodesk Full time

    Job Requisition ID # 25WD91774 Position Overview Are you passionate about computers, software, and the art of dismantling code, devices-even cars? Do you love protecting people from digital threats, whether they come from cybercriminals or simple human error? If you've ever read 2600 or celebrated the Phrack anniversary edition at DEFCON33, we might have the...

  • Principal Engineer

    1 day ago

    Atlanta, Georgia, United States Nexify Infosystems Full time

    Principal Engineer (AI & Carrier Integration)Alpharetta, GA (Remote) (Planned, in-office activities may be required on occasion)Duration: CTHEXP – 10+About The RoleWe are seeking a highly experienced Principal Engineer to lead the design and development of next-generation AI-driven solutions for insurance carrier integration. This role will play a critical...

  • Cybersecurity Principal Engineer

    2 days ago

    Atlanta, GA, United States Truist Inc Full time

    The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status. Need...