> Markdown version of [/jobs/ext/1900255-engineer-ii-cybersecurity-application-security](https://www.wearedevelopers.com/jobs/ext/1900255-engineer-ii-cybersecurity-application-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Engineer II, Cybersecurity , Application Security - **Company:** CarMax Business Services, LLC - **Location:** Chesterfield County, VA, United States - **Experience:** Experienced - **Salary:** $80,600.0 - $120,900.0 - **Contract:** Temporary contract - **Skills:** JavaScript (Programming Language), .NET Framework, Application Programming Interfaces (APIs), Amazon Web Services, Microsoft Azure, C Sharp (Programming Language), Static Program Analysis, Cyber Security, Programming Tools, Github, Python (Programming Language), Key Management, Open Source Technology, Windows PowerShell, Program Analysis, Scripting, Google Cloud, Software Security, Kubernetes, Information Technology, Teamcity, Devsecops, Static Application Security Testing, Dynamic Application Security Testing - **Published:** August 1, 2026 - **Apply:** https://www.dice.com/job-detail/df856c2e-7600-4b9d-b909-c91e010137a1 ## About the Role * Strong fundamentals in general Cybersecurity concepts with an interest in learning more about and contributing to Application Security * Functional understanding with at least one coding or scripting language: e.g. PowerShell, Python, .Net, Javascript, C# * Excellent analytical, troubleshooting, and problem-solving skills and performs well in high pressure or stressful situations * Excellent organization and time management skills * Excellent communication skills to include, but not limited to, verbal and written communication; delivering organized presentations; able to tailor message to the audience; and facilitate group discussions with diplomacy and seek diverse opinions * Ability to effectively estimate the efforts of others and the impact required to accomplish requested tasks/projects Preferred Qualifications * Functional proficiency with at least one coding or scripting language * Experience performing dynamic application security testing (DAST) using open source and commercial tools. * Experience performing static security code analysis (SAST) and providing relevant recommendations to stakeholders. * Experience integrating security into the container lifecycle, including image assurance, Kubernetes posture management, secrets management, and runtime threat detection, * Bachelor's Degree in Computer Science, Engineering, Cybersecurity, or a related field, or equivalent alternative education, skills, and/or practical experience is required. * 2+ years of work experience required in Cybersecurity or other areas directly relevant to cybersecurity responsibilities and tasks. * Knowledge of developer tools like GitHub, Azure DevOps, and TeamCity. * Experience with Public Cloud: e.g. Azure, AWS, Google Cloud Platform. * Understanding of development and product teams and DevSecOps best practices. * CISSP certification preferred but not required. Work Location and Arrangement: This role will be based out of the CarMax Home Office at West Creek (Richmond, VA) and associates will work onsite 4 days per week. Work Authorization: Applicants must be currently authorized to work in the United States on a full-time basis. ## Description The Cybersecurity Engineer II in our Application Security Program plays a key role in enhancing the security program for a company and national brand that has been listed on the Fortune 100 Best Places to Work. We work in a collaborative environment where your ideas can help shape the direction and development of critical security capabilities. You will work with a team of talented professionals that are keenly focused on solving complex security challenges and supporting product innovation with technology. Our team is not afraid to fail fast, learn and are motivated to find ways to make things better. This role requires you to be flexible, adaptable to change, and willing to ask questions that lead to security posture improvements for CarMax. What you will do - Essential Responsibilities: * Implement, develop, operate, and improve Cybersecurity solutions utilized for to progress Application Security at CarMax including static and dynamic analysis, API Sec, and Container Sec. Provide functional and technical expertise on projects that have application security implications for our Company. * Learn and understand the full portfolio of Cybersecurity capabilities at CarMax and how they work together to secure or enterprise. * Independently drive tasks and projects to successful completion through effective time and schedule management, customer interaction, and cross functional team interaction * Effectively triage support problems and respond with the appropriate level of urgency Participate in a 24x7 on-call weekly rotation as scheduled, and the ability to perform after hours support as needed. Current rotation is about 3 weeks per year. ## Related Videos - [Real-World Security for Busy Developers](https://www.wearedevelopers.com/videos/1545-real-world-security-for-busy-developers) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) - [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [How software is steering vehicle technology](https://www.wearedevelopers.com/magazine/515-how-software-is-steering-vehicle-technology)