Senior Application Security Engineer

ADP is hiring a Senior Application Security Engineer in our Alpharetta, GA office. This is a hybrid role. Overview

We are seeking a Senior Application Security Engineer to secure our software supply chain by assessing, governing, and mitigating risks associated with open-source software. This role partners closely with engineering, Dev Ops, and security teams to drive secure OSS adoption at scale.

• Generate and analyze SBOMs and conduct OSS security assessments using tools like Snyk and Syft.
• Evaluate and onboard security tools through POCs.
• Build and operate cloud-based data pipelines to identify vulnerabilities, license risks, and supply chain threats.
• Develop dashboards and reports to communicate security risk to engineering teams and leadership.
• Design and integrate OSS security tooling, including JFrog Artifactory/Xray or Sonatype Nexus/Lifecycle.
• Partner with engineering teams to guide secure open-source usage and remediation.
• Support incident response efforts, including zero-day vulnerability management.
• Create OSS security standards, documentation, and training materials.

• 7+ years of experience in cybersecurity, application security, or software supply chain security.
• Hands‑on experience with SBOMs, OSS scanning tools, and vulnerability management.
• Experience with JFrog or Sonatype artifact repository platforms.
• Strong background in cloud‑native security and automation.

• Programming:
  Python; npm / Node.js ecosystems
• Cloud & Platforms: AWS, Kubernetes, SQL
• OSS & Supply Chain: JFrog Artifactory/Xray, Sonatype Nexus/Lifecycle
• Reporting & Monitoring:
  Amazon Quick Sight, Prometheus

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).
• Knowledge of OWASP, NIST, and secure SDLC practices.
• Strong communication and cross‑functional collaboration skills.
• Security certifications (CISSP, CSSLP, etc.) are a plus.

Python, AWS + Kubernetes + SQL + Security certifications (CISSP, CSSLP, etc.) are a plus

ADP is committed to an inclusive, diverse and equitable workplace, and is further committed to providing equal employment opportunities regardless of any protected characteristic including: race, color, genetic information, creed, national origin, religion, sex, affectional or sexual orientation, gender identity or expression, lawful alien status, ancestry, age, marital status, protected veteran status or disability. Hiring decisions are based upon ADP’s operating needs, and applicant merit including, but not limited to, qualifications, experience, ability, availability, cooperation, and job performance.