Application Security Engineer - Expert

Greif is a global leader in performance packaging located in 40 countries.

The company delivers trusted, innovative, and tailored solutions that support some of the world's most in demand and fastest-growing industries.  

 

With a commitment to legendary customer service, operational excellence, and global sustainability, Greif packages life's essentials - and creates lasting value for its colleagues, customers, and other stakeholders.  

 

Learn more about the company's Customized Polymer, Sustainable Fiber, Durable Metal, and Integrated Solutions at www.greif.com and follow Greif on Instagram and LinkedIn. 

 

OUR VISION: 

To Be the Advantage That Helps Our Customers Win.

 

OUR PURPOSE: 

Creating packaging solutions for life’s essentials. 

Job Requisition #:
035984 Application Security Engineer - Expert (Open)

Job Description:

We are looking for an Experienced Application Security Engineer who Designs and implements security controls to protect the organization's applications, APIs, and computer networks from cyber attacks.

Develops organization-wide best practices for application and IT security, embedding security requirements into the software development lifecycle.

Conducts application security testing, reviews code and architecture for security defects, monitors applications and networks for security issues, and documents all security issues and breaches that are reported.

Key Responsibilities



* Oversees the implementation, monitoring, evaluation, and maintenance of application and IT security systems, policies, and procedures to safeguard the confidentiality, integrity, and availability of the organization's information, systems, and processes.


* Embeds security into the software development lifecycle, defining requirements for secure design, threat modeling, code review, dependency and supply chain management, and pre-release security validation.


* Determines and establishes methodologies for conducting application security testing, vulnerability assessments, and compliance audits, including static analysis, dynamic analysis, software composition analysis, and manual review.


* Leads the evaluation and testing of applications, APIs, third-party integrations, hardware, firmware, and software for possible impact on system security.


* Partners with development and platform teams to triage, prioritize, and drive remediation of application vulnerabilities, establishing severity criteria and remediation timelines.


* Selects, implements, and operates application security tooling, integrating automated testing into CI/CD pipelines and build processes.


* Provides consultation to resolve security incidents such as intrusion, fraud, attacks, leaks, or application-layer compromise.

Recommends actions to halt future incidents and improve security.


* Optimizes the organization's application and IT security plans, controls, processes, and procedures and ensures alignment with global s...