Cybersecurity Engineer IV – Application Security

• Secure high-visibility web and eCommerce applications.
• Partner with software engineering teams throughout the SDLC.
• Drive Application Security and DevSecOps best practices.
• Work on business-critical platforms with experienced engineering teams.

• Integrate security across the SDLC.
• Partner with developers to implement secure-by-design practices.
• Identify, prioritize, and remediate application vulnerabilities.
• Perform and support SAST and DAST testing.
• Review application code and recommend security improvements.
• Promote secure coding, security governance, and DevSecOps.
• Integrate security into CI/CD pipelines.
• Communicate security risks to technical and business stakeholders.
• Mentor development teams on secure software development.

• Bachelor's degree with 8+ years of Information Security experience, or
• Master's degree with 6+ years of Information Security experience.
• Strong Application Security experience is required.

• Hands-on Application Security expertise.
• Strong understanding of the complete SDLC, including requirements, architecture, development, testing, deployment, production support, and maintenance.
• Experience integrating security into software development.
• Secure coding and Application Security Governance.
• Experience with SAST, DAST, vulnerability management, and remediation.
• Experience working directly with software development teams.
• Security integration within CI/CD pipelines.
• Experience with GitHub or similar source control tools.
• Excellent communication, collaboration, presentation, and stakeholder management skills.

• Software development background.
• Source code review and analysis.
• DevSecOps experience.
• AI programming, AI models, or AI-assisted software development.
• Knowledge of modern Application Security tools and best practices.

• This role requires Application Security expertise. Candidates focused primarily on Network Security, SOC Operations, Infrastructure Security, or general Cybersecurity are not a fit.
• Experience partnering with software developers and integrating security throughout the SDLC is mandatory.
• Candidates must be local to Chicago, IL, Peoria, IL, or Dallas, TX and willing to work onsite full-time as business needs evolve.