Senior Application Security Engineer

Nutrien is a leading provider of crop inputs and services, and our business results make a positive impact on the world. Our purpose, Feeding the Future, is the reason we come to work each day. We’re guided by our culture of care and our core values:
We put safety first. We act with integrity. We are stronger together. We deliver with excellence.

Through the collective expertise of our nearly 26,000 employees, we operate a world-class network of production, distribution, and ag retail facilities. We efficiently serve growers' needs and strive to provide a more profitable, sustainable, and secure future for all stakeholders. Help us raise the expectation of what an agriculture company can be and grow your career with Nutrien.

This Sr. Level role is to help development teams build and run software more securely without slowing them down. This role is part of the application security team and works across application development, Dev Ops, and cyber security to help teams work through vulnerabilities, improve day-to-day security practices, and make better decisions about where to focus on the cyber risk areas.

It is also a senior role on the team, so there is an expectation to mentor others, provide practical guidance, and step in when leadership support is needed.

The value of the role is that it helps turn security from something teams react to into something that is built into how they work. For the team, that means clearer direction, stronger technical support, and better follow-through on the issues that matter most. For the business, it means reducing avoidable risk, improving consistency across application security work, and giving leadership confidence that security issues are being managed in a practical and accountable way.

The Role
The Senior Application Security Engineer is a senior technical role responsible for advancing security across the software development lifecycle (SDLC). Working closely with application development, Dev Ops, cyber security, and IT teams, this position leads the identification, assessment, prioritization, and remediation of vulnerabilities across code, infrastructure, and applications, while providing technical direction on secure development practices, automation, and risk reduction.

This role serves as a trusted technical leader and escalation point for application and vulnerability management matters, partnering across teams to drive remediation, influence technical decisions, and support consistent execution across multiple initiatives. The successful candidate will bring strong technical depth, sound judgment, and a strong application development background, along with the ability to provide leadership continuity and decision support when the manager is out of office.

What You'll Do

Build strong relationships across application development, Dev Ops, cyber security, and IT teams to influence secure development outcomes and provide expert technical guidance

Lead vulnerability management activities, including prioritization, risk evaluation, progress tracking, and stakeholder communication

Monitor emerging business, technology, and cyber security trends and translate insights into practical improvements for development teams

Partner with engineering and Dev Ops teams to evaluate, implement, and optimize vulnerability management capabilities across people, process, and technology

Own and enhance key components of vulnerability management and application security solutions in complex enterprise environments

Conduct and oversee targeted vulnerability assessments to identify control gaps and evaluate the effectiveness of existing safeguards

Apply security and risk frameworks such as ISO 27001-2, PCI DSS, NIST CSF 20, ITIL, COBIT, CVSSv4, OWASP, and MITRE ATT&CK to guide technical decisions and remediation priorities

Provide hands‑on expertise with vulnerability management and prioritization platforms, driving adoption of risk‑based remediation practices

Perform root cause analysis on vulnerabilities and work with development and platform teams to determine practical, effective solutions

Assess exploitability and business impact in organizational context and recommend…