10+ years of experience with cybersecurity posture of IT, mission, space systems, and industrial control systems
Experience with mission systems engineering
Experience with technical writing and business development
Experience working in the aerospace industry
Knowledge of NIST standards
Knowledge of cloud systems, federal guidelines, and federal cybersecurity requirements
Ability to apply the Sof tware Development Life Cycle
Ability to apply cybersecurity principles to non-enterprise type environments
Ability to obtain a Secret clearance
Bachelor's degree
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information

SmartExplore AI is experimental.

Apply Directly

Principal Application Security Engineer

Waste Management

Houston, TX 77246

HybridFlexible ScheduleHealth InsurancePaid Time OffRetirement Benefit

Bachelor's Degree (accredited) in Computer Science, MIS, Business Administration or similar area of study or in lieu of degree, High School Diploma or GED (accredited) and four years of relevant work experience.
Seven years of prior work experience (in addition to education requirement).
Certified Information Systems Security Professional (CISSP).
Certified Information Systems Auditor (CISA).
Certified Information Security Manager (CISM).
Fortune 500 experience.
Deep understanding of application security principles and secure coding practices
Ability to design and implement security controls in CI/CD pipelines
Strong analytical and problem-solving skills with attention to detail
Excellent communication and collaboration skills to work with cross-functional teams
Ability to produce clear and actionable security reports and dashboards for stakeholders
Ability to create and deliver presentations targeted to either end users or senior management
SAST (Static Application Security Testing)
DAST (Dynamic Application Security Testing)
IAST (Interactive Application Security Testing)
SCA (Software Composition Analysis / open-source dependency scanning)
API security (API discovery, auth testing, schema validation, runtime protection)
RASP (Runtime Application Self-Protection)
Pen-test automation / BAS for apps (continuous validation of controls)
SBOM (software bill of materials) & supply chain security provenance/attestation
Experience in several or more of the following application security technologies: SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing), IAST (Interactive Application Security Testing), SCA (Software Composition Analysis / open-source dependency scanning), API security (API discovery, auth testing, schema validation, runtime protection), RASP (Runtime Application Self-Protection), Pen-test automation / BAS for apps (continuous validation of controls) and SBOM (software bill of materials) & supply chain security provenance/attestation
Experience in the areas of change control, problem management, incident management troubleshooting security solutions
Ability to handle successfully multiple projects at one time