Application Security Engineer, Team Lead (remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Cencora, so some details may not match this job. The employer's own page has the real description.

Job Overview

As the Application Security Engineer, Team Lead at Cencora, you will be responsible for leading a skilled team in implementing robust application security practices. This role entails establishing security protocols throughout the software development lifecycle, conducting risk assessments, and ensuring compliance with relevant security standards. Additionally, you will work closely with cross-functional teams to develop secure application architecture and promote a culture of security awareness within the organization, thereby minimizing potential security threats and vulnerabilities.

Job Responsibilities

• Lead and mentor a team of application security engineers, providing guidance on best practices and methodologies.
• Conduct comprehensive security assessments and code reviews of web applications and APIs.
• Collaborate with development teams to integrate security into the software development lifecycle.
• Identify, assess, and report on security vulnerabilities and potential risks across applications.
• Stay abreast of emerging security threats and vulnerabilities to proactively address them.
• Develop and implement security training programs for developers and other stakeholders.
• Work with compliance teams to ensure adherence to relevant security standards and regulations.
• Provide technical leadership and coordination for incident response and remediation actions.
• Assist in the creation and maintenance of security policies and documentation.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• 5+ years of experience in application security, with at least 2 years in a leadership role.
• Strong knowledge of application security principles, secure coding practices, and compliance standards.
• Expertise in security assessment tools and methodologies, such as OWASP and static/dynamic code analysis.
• Hands-on experience with cloud security practices and principles.
• Excellent problem-solving skills and the ability to communicate complex concepts effectively.
• Relevant certifications (e.g., CISSP, CEH, or CSSLP) are highly preferred.

Technologies & Tools

The Application Security Engineer, Team Lead will leverage a variety of technologies and tools to ensure effective application security. Common tools may include SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing) tools, source code monitoring software, vulnerability management systems, cloud security platforms, and various coding frameworks. Familiarity with programming languages such as Java, Python, and JavaScript will be essential for conducting thorough assessments.

Ideal Candidates

Ideal candidates for this position will possess strong leadership and interpersonal skills, enabling them to inspire and cultivate a high-performing security team. They are proactive problem solvers with an analytical mindset, capable of anticipating security challenges and formulating strategic responses. The ideal candidate is also an effective communicator, able to convey technical security topics to diverse audiences with varying levels of understanding. A passion for continuous learning in the ever-evolving field of cybersecurity and an unwavering commitment to promoting security best practices are critical qualities for success in this role.