Application Security Engineer

Job Description

We seek a highly motivated and experienced Application Security Engineer to join our growing security team. This role is highly technical and candidates must possess a solid understanding of the security and privacy of our company's applications and data.

The Application Security Engineer must understand development, coding, security engineering, and secure systems configurations. This position ensures that every step of the software development lifecycle (SDLC) follows security best practices.

• Conduct security assessments using SAST and DAST tools.
• Collaborate with software development teams to integrate security into the development life cycle.
• Conduct security assessments of web, mobile, and other applications, analyze results to identify vulnerabilities and provide guidance on remediation.
• Design and implement secure software development practices, including threat modeling, secure coding standards, and code review.
• Stay current with security threats, trends, and technologies, recommend new security controls.
• Conduct application security investigations and provide risk mitigation recommendations.
• Maintain security documentation and collaborate on security policies, procedures, and standards.

• Performs other duties as assigned.

• Bachelor's degree in computer science, information security, or related field.

• Five (5) years or more experience with OWASP, SAST, DAST, SCA, RASP and common security tools.
• Seven (7) years or more application security, security engineering, software development experience.
• Five (5) years or more strong understanding of web application security and common attack vectors.
• Five (5) years or more experience with secure coding practices, threat modeling, and SDLC methodologies.
• Five (5) years or more proven experience in diagnosing, isolating, resolving complex issues and recommending/implementing strategies.
• Five (5) years or more demonstrated experience with systems integration processes, methodology and tools.
• Seven (7) years or more development and scripting experience.
• Five (5) years or more professional application security role.
• Five (5) years or more experience with API and Web Security.
• Three (3) years or more experience with WAF or similar application security infrastructure a plus.
• Seven (7) years or more experience in integrating security in CI/CD, Dev Ops.
• Six (6) years or more experience process or operation management.
• Six (6) years or more experience Value Stream Mapping, Continuous Flow, Pull Replenishment and other process improvement experience.

• Excellent communication skills, verbal and written, working effectively with cross‑functional teams.
• Ability to create and maintain professional relationships at all organization levels.
• Ability to work independently and as a team member.
• Self‑driven, flexible in fast‑paced environment.
• Capability for multi‑tasking, highly organized, with strong time management.
• Proficiency in at least one programming language (e.g., Python, .NET, JavaScript); .NET preferred.
• Proficiency in at least one common scripting language (e.g., Power Shell, Bash).
• Familiarity of NIST framework, PCI, ISO 27001, SOC, SOX, CCPA, GDPR and global regulations.
• CI/CD experience with Azure Dev Ops, Terraform, or other automation and integration technologies.
• Risk management findings, vulnerability prioritization, threat modeling, and mitigation strategy experience.

• CISSP, OSCP, CASE, or other industry‑leading certifications preferred.

1‑10%

Information Security

Salaried

Minimum: $
Maximum: $

Ryder offers comprehensive health and welfare benefits, including medical, prescription, dental, vision, life insurance and disability insurance options, paid time off for vacation, illness, bereavement, family and parental leave, and a tax‑advantaged 401(k) retirement savings plan.

Ryder is proud to be an Equal Opportunity Employer and Drug‑Free workplace. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, gender identity, age, status as a protected veteran, among other things, or status as a qualified individual with disability.