Principal Application Security Engineer

Overview

Waste Management is embarking on an enterprise‑wide technology transformation to fuel leadership in an industry evolving through innovation. We’re seeking exceptional Information Technology professionals energized by shaping the future of technology  this role, you will help build programs from the ground up, define new standards, and lead initiatives that modernize how we design, develop, and deploy technology across the business. Your technical expertise, paired with industry best practices, will influence how technology aligns with and advances our broader business strategy.

If you’re driven to lead, innovate, and leave a lasting impact, this is a place to do your most meaningful work.

The Principal Application Security Engineer is responsible for defining and driving the application security strategy across the organization. This role ensures secure design and development practices are embedded within the software development lifecycle (SDLC) and Dev Sec Ops  pipelines. The architect will lead efforts to implement security tooling, establish reporting frameworks, and collaborate with developers, infrastructure teams, vendors, and security stakeholders to maintain a robust application security posture.

• Lead the design and implementation of application security architecture and engineering across enterprise applications, partnering with software development, infrastructure, and platform teams to secure cloud-native and on‑prem environments.
• Embed security controls and best practices into CI/CD pipelines and Dev Sec Ops  workflows, driving adoption of secure coding standards and threat modeling across engineering teams.
• Evaluate, implement, and operate application security tooling (e.g., SAST, DAST, IAST, container security and related capabilities), ensuring solutions are effective, scalable, and well‑integrated.
• Define, develop, and maintain application security metrics, reporting, and dashboards to provide visibility to leadership and key stakeholders.
• Engage and collaborate with third‑party vendors to assess and validate the security capabilities of applications and services.
• Provide guidance and mentorship on application security standards, risk management, and compliance requirements to elevate security maturity across teams.
• Participate in occasional off‑hours support to assist with troubleshooting or emerging threats.
• Provide day‑to‑day management for the Information Protection function, responsible for security technologies used to protect WM's data and networks.
• Participate in WM's Information Security Office leadership team to drive innovative security solutions and collaborate with other IT and global functions.
• Manage the work environment, identify workforce needs, and ensure performance against expectations, values and vision.
• Manage security audit and intrusion detection system logs for system and network anomalies and provide high‑level analysis.
• Respond to unique, highly complicated, suspicious or malicious events detected through data collection or reported by Help Desk or users.
• Provide technically advanced remediation and application event support to IT operations and engineering teams.
• Perform initial computer system forensic investigations and support fraud investigations.
• Provide top‑level analysis, design and support for log collection of firewalls, routers, networks and operating systems.
• Communicate technical and event assessment results, evaluate engineering and integration initiatives, and provide technical expertise to assess security policies, standards and guidelines.
• Develop, collect and analyze logs from firewalls, intrusion detection systems, enterprise anti‑virus systems and software deployment tools.
• Review and recommend installation, modification or replacement of hardware or software components.
• Identify and address configuration changes that impact event collection.

Will coach and mentor less experienced analysts and act as team leader on more complicated systems projects.

• Education and Experience
• Education:
  
  Bachelor’s Degree (accredited) in Computer Science, MIS, Business Administration or…