Principal Application Security Engineer

Waste Management

Houston, TX 77246

HybridFlexible ScheduleHealth InsurancePaid Time OffRetirement Benefit

Excellent communication and collaboration skills to work with cross-functional teams
Certified Information Security Manager (CISM).
Pen-test automation / BAS for apps (continuous validation of controls)
Fortune 500 experience.
Seven years of prior work experience (in addition to education requirement).
DAST (Dynamic Application Security Testing)
Certified Information Systems Auditor (CISA).
API security (API discovery, auth testing, schema validation, runtime protection)
Experience in several or more of the following application security technologies: SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing), IAST (Interactive Application Security Testing), SCA (Software Composition Analysis / open-source dependency scanning), API security (API discovery, auth testing, schema validation, runtime protection), RASP (Runtime Application Self-Protection), Pen-test automation / BAS for apps (continuous validation of controls) and SBOM (software bill of materials) & supply chain security provenance/attestation
Ability to create and deliver presentations targeted to either end users or senior management
Ability to handle successfully multiple projects at one time
IAST (Interactive Application Security Testing)
SBOM (software bill of materials) & supply chain security provenance/attestation
Ability to produce clear and actionable security reports and dashboards for stakeholders
Certified Information Systems Security Professional (CISSP).
Strong analytical and problem-solving skills with attention to detail
SAST (Static Application Security Testing)
Ability to design and implement security controls in CI/CD pipelines
RASP (Runtime Application Self-Protection)
Experience in the areas of change control, problem management, incident management troubleshooting security solutions
Bachelor's Degree (accredited) in Computer Science, MIS, Business Administration or similar area of study or in lieu of degree, High School Diploma or GED (accredited) and four years of relevant work experience.
Deep understanding of application security principles and secure coding practices
SCA (Software Composition Analysis / open-source dependency scanning)