Cybersecurity Engineer IV Application Security

We are hiring a Cybersecurity Engineer IV - Application Security to join our Security Engineering team. This is a dedicated Application Security role focused on embedding security throughout the Software Development Lifecycle (SDLC). This is not a Network Security, SOC, Infrastructure Security, or general Cybersecurity position. Key Responsibilities

• Integrate security across the SDLC.
• Partner with developers to implement secure-by-design practices.
• Identify, prioritize, and remediate application vulnerabilities.
• Perform and support SAST and DAST testing.
• Review application code and recommend security improvements.
• Promote secure coding, security governance, and DevSecOps.
• Integrate security into CI/CD pipelines.
• Communicate security risks to technical and business stakeholders.
• Mentor development teams on secure software development.

• Bachelor’s degree with 8+ years of Information Security experience, or
• Master’s degree with 6+ years of Information Security experience.
• Strong Application Security experience is required.

Must-Have Skills

• Hands-on Application Security expertise.
• Strong understanding of the complete SDLC, including requirements, architecture, development, testing, deployment, production support, and maintenance.
• Experience integrating security into software development.
• Secure coding and Application Security Governance.
• Experience with SAST, DAST, vulnerability management, and remediation.
• Experience working directly with software development teams.
• Security integration within CI/CD pipelines.
• Experience with GitHub or similar source control tools.
• Excellent communication, collaboration, presentation, and stakeholder management skills., * Software development background.
• Source code review and analysis.
• DevSecOps experience.
• AI programming, AI models, or AI-assisted software development.
• Knowledge of modern Application Security tools and best practices.

Important Notes

• This role requires Application Security expertise. Candidates focused primarily on Network Security, SOC Operations, Infrastructure Security, or general Cybersecurity are not a fit.
• Experience partnering with software developers and integrating security throughout the SDLC is mandatory.
• Candidates must be local to Chicago, IL, Peoria, IL, or Dallas, TX and willing to work onsite full-time as business needs evolve.

Pulled from the full job description

• Work from home
• Opportunities for advancement, * Competitive salary
• Opportunity for advancement
• Training & development