Engineer II, Cybersecurity - Application Security

8901 - Corp Office West Crk - 12800 Tuckahoe Creek Parkway, Richmond, Virginia, 23238

Car Max, the way your career should be!

The Cybersecurity Engineer II in our Application Security Program plays a key role in enhancing the security program for a company and national brand that has been listed on the Fortune 100 Best Places to Work. We work in a collaborative environment where your ideas can help shape the direction and development of critical security capabilities. You will work with a team of talented professionals that are keenly focused on solving complex security challenges and supporting product innovation with technology.

Our team is not afraid to fail fast, learn and are motivated to find ways to make things better. This role requires you to be flexible, adaptable to change, and willing to ask questions that lead to security posture improvements for Car Max.

• Implement, develop, operate, and improve Cybersecurity solutions utilized for to progress Application Security at Car Max including static and dynamic analysis, API Sec, and Container Sec.
  Provide functional and technical expertise on projects that have application security implications for our Company.
• Learn and understand the full portfolio of Cybersecurity capabilities at Car Max and how they work together to secure or enterprise.
• Independently drive tasks and projects to successful completion through effective time and schedule management, customer interaction, and cross functional team interaction
• Effectively triage support problems and respond with the appropriate level of urgency
  Participate in a 24x7 on-call weekly rotation as scheduled, and the ability to perform after hours support as needed. Current rotation is about 3 weeks per year.

• Functional proficiency with at least one coding or scripting language
• Experience performing dynamic application security testing (DAST) using open source and commercial tools.
• Experience performing static security code analysis (SAST) and providing relevant recommendations to stakeholders.
• Experience integrating security into the container lifecycle, including image assurance, Kubernetes posture management, secrets management, and runtime threat detection

• Bachelor’s Degree in Computer Science, Engineering, Cybersecurity, or a related field, or equivalent alternative education, skills, and/or practical experience is required.
• 2+ years of work experience required in Cybersecurity or other areas directly relevant to cybersecurity responsibilities and tasks.
• Knowledge of developer tools like Git Hub, Azure Dev Ops, and Team City.
• Experience with Public Cloud: e.g. Azure, AWS, GCP.
• Understanding of development and product teams and Dev Sec Ops  best practices.
• CISSP certification preferred but not required.

This role will be based out of the Car Max Home Office at West Creek (Richmond, VA) and associates will work onsite 4 days per week.

Applicants must be currently authorized to work in the United States on a full-time basis.

Car Max disrupted the auto industry by delivering the honest, transparent and high-integrity experience customers want and deserve. This innovative thinking around the way cars are bought and soldhas helped us become the nation’s largest retailer of used cars, with over 200 locations nationwide.

Our amazing team of more than 25,000 associates work together to deliver iconic customer experiences.

Along the way,we help every associate grow their career and achieve their best, at work and in their community. We are recognized for our commitment to training and diversity and areone of the FORTUNE 100 Best Companies to Work For®.

Car Max is committed to bringing together people from different backgrounds and perspectives, providing employees with a safe, welcoming, and inclusive work environment.

Car Max is an equal opportunity employer, and all qualified candidates will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender…