Security Application Engineer

March 25

🗽 New York – Remote

Although this job is listed in New York, this company may be open to hiring remote in other states.

💵 $100k - $135k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Security Engineer

Apply Now

Receive Emails with Similar Jobs

Bertelsmann SE & Co. KGaA

WebsiteLinkedInAll Job Openings

Bertelsmann SE & Co. KGaA is a global media and education company that has evolved from a small book publisher founded in 1835 into a diverse organization with over 80,000 employees worldwide. The company operates various business units, including the RTL Group, Penguin Random House, BMG, Arvato Group, Bertelsmann Marketing Services, and Bertelsmann Education Group, which offer job opportunities across about 50 countries. Bertelsmann is dedicated to fostering an equitable and inclusive workplace, encouraging personal initiative, creativity, and diverse perspectives among its workforce.

10,000+ employees

👥 B2C

📱 Media

📚 Education

📋 Description

• Join Penguin Random House as an Application Security Engineer in the IT Security team • Responsible for advancing Secure Software Development Life Cycle (SDLC) practices • Incorporate Application Security services and technologies for secure design • Collaborate with developers and stakeholders to evaluate security architecture • Mitigate identified weaknesses and vulnerabilities with development teams • Develop core infrastructure architecture to minimize vulnerability risks • Implement application security architectures aligned with business objectives • Utilize scripting languages to build automation tools • Create presentations and documentation on security best practices • Assess threats, vulnerabilities, and collaborate on remediation • Formulate application security policies and guidelines • Enhance Application Security by integrating security tools into the CI/CD pipeline • Partner with stakeholders to deliver security-focused projects and initiatives

🎯 Requirements

• Bachelor's degree in computer science or a related field • Minimum of five years of professional experience in secure software development, security engineering, DevOps, or application penetration testing • Proficient in communication, interpersonal relations, and organizational management • Experience with application security tools such as SCA, SAST, DAST • Knowledge of software and web application security vulnerabilities, including OWASP Top 10 and SANS/CWE Top 25 • Expertise in security assessments for web and mobile applications based on OWASP ASVS/M-ASVS • DevOps experience with GitLab/GitHub, Ansible, Jenkins • Advanced understanding of web architectures, APIs, mobile applications, and cloud infrastructure • Experience securing DevOps, continuous integration, configuration management, and continuous deployment • Ability to lead code reviews, execute threat modeling, and conduct penetration tests • Industry-recognized certification in security (e.g., CISSP, CISA, CISM, CRISC, CEH) is a plus

🏖️ Benefits

• Medical/Prescription drug insurance • Dental • Vision • Health Care/Dependent Care Flexible Spending Account • Health Savings Account • Pre-Tax and Roth 401(k) • Short and Long-Term Disability Insurance • Life/AD&D Insurance • Commuter Benefits • Student Loan Repayment Program • Educational Assistance • Generous paid time off