Application Security Engineer

Job ID : 27220

Posted : 21-Mar-2022

Service line : Advisory Segment

Role type : Full-time

Areas of Interest

Digital & Technology / Information Technology

Location(s)

Atlanta – Georgia – United States of America, Austin – Texas – United States of America, Charlotte – North Carolina – United States of America, Chicago – Illinois – United States of America, Cincinnati – Ohio – United States of America, Cleveland – Ohio – United States of America, Columbus – Ohio – United States of America, Dallas – Texas – United States of America, Detroit – Michigan – United States of America, Houston – Texas – United States of America, Jacksonville – Florida – United States of America, Raleigh – North Carolina – United States of America, St. Louis – Missouri – United States of America, Tampa – Florida – United States of America, Washington, D.C. – District of Columbia – United States of America

Application Security Engineer

JOB SUMMARY

The mission of the individual in this role is to leverage their understanding of enterprise-level knowledge and/or knowledge to mitigate cyber security risk through the support of core DevSecOps services and supporting application security initiatives. They will actively work with the CBRE business, Digital & Technology and other partner organizations (Compliance, Risk Mgmt., Audit, & Legal) to seamlessly integrate security processes, tools, and people into the business culture providing a holistic security ecosystem, driving continuous improvements and seamless protection / monitoring capabilities globally. Executes on initiatives that drive problem resolution. As a member on the team, this individual will work with progressive development teams with a mindset toward being agile and solving problems iteratively.

Experience in all skills listed is not necessary to be qualified for the position. If you have relevant similar experience, we still want to talk to you.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

• Provide assistance to our development teams to understand, and remediate security findings as you grow
• Support our Security Champions within development groups
• Be able to come up to speed on new and emerging technologies/cloud services, and learn how to establish at least a baseline of security for them
• Be willing to express your opinions

SUPERVISORY RESPONSIBILITIES

• None

EDUCATION and EXPERIENCE:

• Bachelor’s degree (BA/BS) in a related field of work
• or equivalent combination of education and experience (equivalent work experience = 2 years of related experience for every year of higher-level education).

• Basic conceptual understanding of security concepts, and tooling such as: SAST, DAST (Dynamic Application Security Testing), Penetration Testing, Open-Source Analysis, Secrets Management, Artifact Management
• Basic conceptual understanding of some of the following: databases, Cloud, CICD, Containerization, Infrastructure as Code

COMMUNICATION SKILLS

Ability to comprehend, analyze, and interpret business documents. Ability to respond effectively to issues.

REASONING ABILITY

Ability to solve problems and deal with multiple options in simple situations. Requires entry level analytical and quantitative skills. Draws upon the analysis of others and contributes ideas to the team.

#D&T

CBRE is an equal opportunity/affirmative action employer with a long-standing commitment to providing equal employment opportunity to all qualified applicants regardless of race, color, religion, national origin, sex, sexual orientation, gender identity, pregnancy, age, citizenship, marital status, disability, veteran status, political belief, or any other basis protected by applicable law.

CBRE is an equal opportunity/affirmative action employer with a long-standing commitment to providing equal employment opportunity to all qualified applicants regardless of race, color, religion, national origin, sex, sexual orientation, gender identity, pregnancy, age, citizenship, marital status, disability, veteran status, political belief, or any other basis protected by applicable law.

NOTE: An additional requirement for this role is the ability to comply with COVID-19 health and safety protocols, including COVID-19 vaccination proof and/or rigorous testing.