Senior Application Security Engineer

Benefits Overview

A career at CoBank can offer you the opportunity to make a personal impact on the people and communities where we do business. In order to be the best, we hire the best!

Benefits Offered by Co Bank

• Careers with a purpose
• Time-Off Packages, 15 days of vacation, 10 paid sick days and 11 paid holidays
• Competitive Compensation & Incentive
• Hybrid work model: flexible arrangements for most positions
• Benefits Packages, including Medical, Dental and Vision coverage, Disability, AD&D, and Life Insurance
• Robust associate training and development with CoBank University
• Tuition reimbursement for higher education
• Outstanding 401k: up to 6% matching and additional 3% non-elective contribution & Student Loan Match
• Community Impact:
  United Way Angel Day, Volunteer Day and Associate Directed Contribution
• Associate Resource Groups: creating a culture of respect and inclusion
• Recognize a fellow associate through our GEM awards

Join CoBank's high-performing Application Security team and help protect the applications, cloud services, and data that support our business. You will collaborate with engineering and Dev Ops teams to integrate security into application development, CI/CD pipelines, cloud platforms, and containerized environments. In this role, you will support enterprise application and cloud security technologies, conduct security testing and risk assessments, help drive vulnerability remediation, and participate in security investigations.

You will also provide expertise in secure coding, cloud-native security controls, software supply chain security, and third-party risk. By exploring emerging threats and technologies and recommending practical improvements, you will help ensure CoBank's technology remains secure, compliant, and resilient.

• Implements and supports Enterprise Security projects related to application and cloud solutions and technologies. Ensures security standards and best practices are appropriately integrated into the development, deployment, and hosting of applications, including Git Hub repositories, AWS, and Kubernetes environments.
• Acts as champion for secure coding principles, performs Static & Dynamic Application Security Testing (SAST/DAST), and administers application security testing tools such as Checkmarx, Upwind and other similar capabilities. Partners with Dev Ops teams to embed security into CI/CD pipelines and remediate vulnerabilities.
• Administers and manages the Cloud Native Application Protection Platform (CNAPP), such as Upwind, providing runtime protection, vulnerability management, and workload security across cloud and container environments.
• Conducts software supply chain security and third-party and vendor risk assessments using tools such as Venminder, evaluating SaaS and third-party hosted services to identify and mitigate risk to CoBank data.
• Assists with the scheduling, oversight, and execution of annual Penetration Testing events with external, 3rd party testing partners. Evaluates findings and communicates remediation plans to internal stakeholders.
• Participates in large-scale projects as an application and cloud security subject matter expert. Advises on secure application and cloud architectural design and controls.
• Monitors, evaluates, and responds to alerts or notifications from various security systems. Participates in Security team on-call rotation (24/7), approximately 1 week/quarter.
• Reviews and provides input to security policies, standards, procedures and guidelines.
• Understands legislative, regulatory, and marketplace environments to ensure the bank security practices comply with those requirements and remains current with accepted practices.
• Conducts investigations of potential non-compliance with…