Demo

Application Security Manager - Remote

WebstaurantStore
Lititz, PA Remote Full Time
POSTED ON 3/28/2025
AVAILABLE BEFORE 4/1/2025
Job Summary

Our CAST (Clark Associates Security Team) is committed to maintaining the highest standards of security and integrity in all our applications and systems. We are seeking a Hands-On Senior Application Security Manager who will lead our application security efforts while actively participating in technical tasks. In this role, you will function as a senior application security engineer who also guides and mentors the team. You will be instrumental in integrating security practices throughout the software development lifecycle (SDLC), securing containerized applications, securing our ecommerce platforms, and enhancing our overall security posture.

Responsibilities

Technical Leadership:

  • Actively perform security assessments, code reviews, penetration testing, and vulnerability management.
  • Develop and implement security measures to protect applications, including those running in containerized
  • Stay current with the latest security threats, vulnerabilities, and technologies.

Team Leadership:

  • Lead, mentor, and provide technical guidance to a team of application security engineers and analysts.
  • Foster a collaborative environment that encourages knowledge sharing and continuous learning.

Program Management:

  • Oversee the integration of security practices into all stages of the SDLC.
  • Implement security tools and processes within CI/CD pipelines and development workflows.
  • Establish metrics and reporting mechanisms to track the effectiveness of the Application Security program.

Security Control Integration:

  • Collaborate with development and DevOps teams to ensure secure coding practices and secure deployment of containerized applications.
  • Integrate security testing tools into CI/CD pipelines for both traditional and containerized applications.

Policy Development:

  • Establish and enforce secure coding standards, policies, and procedures across the organization.
  • Ensure compliance with relevant security standards and regulations.

Risk Management:

  • Identify, assess, and prioritize application security risks, including those specific to container technologies.
  • Develop and oversee remediation plans to address identified vulnerabilities.

Collaboration:

  • Work closely with product managers, developers, and other stakeholders to integrate security requirements into product development.
  • Provide security design reviews and consultations for new and existing projects.
  • Advocate for security best practices across the organization.

Reporting:

  • Provide regular updates on security metrics, program status, and risk assessments to executive leadership.
  • Communicate security issues and strategies effectively to both technical and non-technical audiences.

Physical Requirements

  • Work is performed while sitting/standing and interfacing with a personal computer.
  • Requires the ability to communicate effectively using speech, vision, and hearing.
  • Requires the regular use of hands for simple grasping and fine manipulations.
  • Requires occasional bending, squatting, crawling, climbing, and reaching.
  • Requires the ability to occasionally lift, carry, push, or pull medium weights, up to 50lbs.

Remote Work Qualifications

  • Access to a reliable and secure high-speed internet connection. Cable or fiber internet connections (at least 75mbps download/10mbps upload) are preferred, as satellite connections often cannot support the technologies used to perform day-to-day tasks.
  • Access to a home router and modem.
  • A dedicated home office space that is noise- and distraction-free. The space should have strong wireless connection or a wired Ethernet connection (wired connection is preferred, if possible).
  • A valid, physical address (apartment, suite, etc.). PO Boxes are not supported, as a physical address is required for you to receive your computer equipment.
  • The desire and ability to work and communicate with other team members via chat, webcam, etc.
  • Legal residents of one of the following states: (AK, AL, AR, AZ, CT, DE, FL, GA, IA, ID, IN, KS, KY, LA, MD, ME, MI, MN, MO, MS, NC, ND, NH, NM, NV, OH, OK, PA, SC, SD, TN, TX, UT, VA, VT, WI, WV, or WY). H-1B Visa Sponsorship Not Available, W2 only.

Experience

  • Minimum of 5 years of hands-on experience in application security engineering.
  • Proven experience leading or mentoring a team of security professionals.
  • Extensive experience integrating security into the SDLC and CI/CD pipelines.
  • Demonstrated expertise in securing containerized applications and environments.

Education

  • Bachelor's degree in Computer Science, Information Security, or a related field; Master's degree preferred.

Certifications (Preferred)

  • Certified Information Systems Security Professional (CISSP)
  • Certified Secure Software Lifecycle Professional (CSSLP)
  • GIAC Web Application Penetration Tester (GWAPT)
  • Certified Kubernetes Security Specialist (CKS)
  • Certified Information Security Manager (CISM)

Desired Traits

Technical Expertise

Application Security:

  • Deep understanding of application security principles, threats, and mitigation strategies.
  • Proficient with tools like OWASP ZAP, Burp Suite, Checkmarx, Fortify, and Veracode.
  • Experience with OWASP Top 10, OWASP ASVS, and secure coding standards.
  • Understanding of various API’s (REST) API Frameworks and API Security.

Container Security:

  • Strong knowledge of containerization technologies (e.g., Docker, Kubernetes).
  • Experience securing containerized applications and implementing best practices for container security.
  • Familiarity with container security tools like Aqua Security, Twistlock (Palo Alto Prisma), or Sysdig Secure.

CI/CD and DevOps:

  • Proficient with CI/CD tools such as Jenkins, GitLab CI/CD, or Azure DevOps.
  • Experience integrating security tools into CI/CD pipelines for automated testing.

Cloud Security:

  • Experience with securing applications in cloud environments (e.g., AWS, Azure, GCP).
  • Familiarity with cloud security services like AWS Security Hub or Azure Security Center.

Programming and Scripting:

  • Strong coding skills in languages such as Java, C#, Python, JavaScript, or similar.
  • Ability to conduct code reviews and guide developers on secure coding practices.

eCommerce Security:

  • Experience with identifying, mitigating, and preventing security threats to ensure the safety and privacy of customer data and the integrity of the ecommerce systems.
  • Conduct regular security assessments and audits of the ecommerce platform to identify vulnerabilities.
  • Ensure that ecommerce platform complies with relevant regulatory standards such as PCI-DSS, GDPR, and CCPA.
  • Familiarity with Web Application Firewalls and WAF logs.

Incident Response:

  • Oversee incident investigation efforts, including forensic analysis, to determine the root cause of incidents.
  • Coordinate with cross-functional teams to ensure prompt and effective resolution of security incidents and prevent recurrence.

Skills

  • Leadership: Proven ability to lead and mentor a technical team effectively.
  • Communication: Excellent verbal and written communication skills; capable of explaining complex security concepts clearly.
  • Problem-Solving: Strong analytical and troubleshooting skills in resolving security issues.
  • Industry Knowledge: Up-to-date with the latest trends in application and container security.
  • Time Management: Ability to manage multiple projects and priorities efficiently.

Company Overview

The foodservice professional’s premier source for restaurant equipment, supplies, and knowledge online. Our purpose is to empower and equip people to run their businesses more profitably and efficiently.

Benefits

  • Medical
  • Vision
  • Dental
  • PTO
  • Paid Maternity Leave
  • Paid Parental Leave
  • Life Insurance
  • Disability
  • Dependent Care FSA
  • 401(k) matching
  • Employee Assistance Program
  • Wellness Incentives
  • Company Discounts
  • AT&T & Verizon Discount
  • Bonus Opportunities

Available at HQ Locations Only

  • On-Site Fitness Centers
  • Dog-friendly Offices

If your compensation planning software is too rigid to deploy winning incentive strategies, it’s time to find an adaptable solution. Compensation Planning
Enhance your organization's compensation strategy with salary data sets that HR and team managers can use to pay your staff right. Surveys & Data Sets

What is the career path for a Application Security Manager - Remote?

Sign up to receive alerts about other jobs on the Application Security Manager - Remote career path by checking the boxes next to the positions that interest you.
Income Estimation: 
$135,994 - $168,063
Income Estimation: 
$220,784 - $286,649
Income Estimation: 
$152,549 - $188,894
Income Estimation: 
$194,072 - $240,547
Income Estimation: 
$135,994 - $168,063
Income Estimation: 
$161,209 - $233,553
Income Estimation: 
$151,231 - $194,242
Income Estimation: 
$188,900 - $249,994
Income Estimation: 
$187,890 - $240,773
Income Estimation: 
$123,246 - $161,441
Income Estimation: 
$152,549 - $188,894
Income Estimation: 
$135,994 - $168,063
Income Estimation: 
$161,209 - $233,553
Income Estimation: 
$126,569 - $164,899
Income Estimation: 
$151,231 - $194,242
Income Estimation: 
$155,218 - $198,966
Income Estimation: 
$153,752 - $200,235
View Core, Job Family, and Industry Job Skills and Competency Data for more than 15,000 Job Titles Skills Library

Job openings at WebstaurantStore

WebstaurantStore
Hired Organization Address North Las Vegas, NV Full Time
Webstaurantstore is Hiring Now!! Career Growth Opportunities | Great Pay | Great Benefits | Fun Environment This is your...
WebstaurantStore
Hired Organization Address Aberdeen, MD Full Time
Job Summary The Inventory Control Specialist role ensures the accuracy of the data in our internal systems compared to t...
WebstaurantStore
Hired Organization Address Lebanon, TN Full Time
Job Description WebstaurantStore is hiring! Outbound Assistant Manager Day Shift We are looking for experienced, people-...
WebstaurantStore
Hired Organization Address Lebanon, TN Full Time
Job Description Webstaurant Store is hiring! We are looking for experienced, people-oriented individuals to join our tea...

Not the job you're looking for? Here are some other Application Security Manager - Remote jobs in the Lititz, PA area that may be a better fit.

Manager Epic Laboratory -IS Application Services

Penn State Hershey Health System, Hershey, PA

AI Assistant is available now!

Feel free to start your new journey!