Application Security Engineer, Team Lead (remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Cencora, so some details may not match this job. The employer's own page has the real description.

Overview

The Application Security Engineer, Team Lead at Cencora will be responsible for overseeing the application security program that safeguards our software development lifecycle. This remote position involves collaborating with cross-functional teams to identify security vulnerabilities, implement security best practices, and ensure compliance with industry standards. The ideal candidate will lead a team of security professionals, drive strategic initiatives, and contribute to enhancing our overall security posture while promoting a culture of security awareness within the organization.

Job Responsibilities

• Lead the application security team in conducting risk assessments and vulnerability assessments across all applications.
• Design and implement security protocols and best practices to enhance application security throughout the software development lifecycle.
• Collaborate with developers and product teams to review designs and ensure secure coding practices are followed.
• Perform security testing and code reviews to identify and remediate vulnerabilities within the applications.
• Maintain up-to-date knowledge of emerging security threats and effectively communicate these to the team and stakeholders.
• Develop, implement, and manage security measures for applications to ensure compliance with regulatory requirements.
• Train and mentor team members and other staff on security awareness and application security best practices.
• Produce thorough documentation and reporting on application security status and incidents.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 5 years of experience in application security, with a focus on secure software development practices.
• Proven experience leading a team of security professionals and managing security projects.
• Strong understanding of web application security vulnerabilities (e.g., OWASP Top Ten) and mitigation strategies.
• Familiarity with various security testing tools and methodologies, including static and dynamic analysis.
• Relevant security certifications, such as CISSP, CISM, or CEH, are preferred.
• Excellent problem-solving skills and the ability to communicate security concepts to non-technical stakeholders.

Technologies & Tools

The Application Security Engineer, Team Lead will work with various technologies and tools, including but not limited to static and dynamic application security testing (SAST/DAST) tools, web application firewalls (WAF), secure coding frameworks, CI/CD security integrations, threat modeling tools, and vulnerability management software. Familiarity with cloud-based security solutions and the integration of application security into CI/CD pipelines will also be essential.

Ideal Candidates

Ideal candidates for this position will possess strong leadership qualities, demonstrating the ability to inspire and motivate a team towards achieving common security goals. They should be detail-oriented, exhibiting excellent analytical skills to identify complex security issues. Additionally, successful candidates will have strong communication skills, allowing them to effectively present security findings and recommendations to both technical and non-technical audiences. A proactive mindset and a commitment to continuous improvement in security practices will further enhance their fit for the role.