Cybersecurity Engineer
Conagra Brands17 hours ago
Omaha, NE, USAMid Level
Base Salary
$74k - $109k/yr
Responsibilities
- Integrate, operate, and optimize static application security testing, dynamic application security testing, software composition analysis, and secrets-scanning tools in continuous integration and continuous delivery pipelines.
- Perform application threat modeling and secure design reviews for applications, features, services, and application programming interfaces.
- Triage, prioritize, track, and drive remediation of application vulnerabilities while monitoring service-level agreements, risk exposure, and program metrics.
- Conduct or coordinate secure code reviews and application or application programming interface penetration testing for high-risk systems.
- Manage open-source dependency risks and support software bill of materials initiatives.
- Define and promote secure coding standards, developer education, and the security champions program.
- Partner with cloud and platform teams on web, mobile, application programming interface, container, and cloud-native application security.
- Contribute to application-layer security incident response and root-cause remediation.
- Support security tool evaluations, pilots, proofs of concept, enterprise initiatives, releases, risk assessments, and control conformance activities.
- Monitor emerging application security and software supply chain threats and communicate findings to cybersecurity leadership.
Requirements
- Bachelor’s degree in Computer Science, Information Security, Software Engineering, or a related field, or equivalent professional experience.
- At least 3 years of information technology or software engineering experience, including at least 2 years focused on application security.
- Hands-on experience with static application security testing, dynamic application security testing, and software composition analysis tools.
- Working knowledge of the Open Worldwide Application Security Project Top 10 and Application Security Verification Standard.
- Experience reviewing code in one or more of Java, C#, Python, JavaScript, or TypeScript.
- Familiarity with Azure DevOps, GitHub Actions, or Jenkins.
- Knowledge of common application vulnerabilities and practical remediation approaches.
- Experience with NIST Cybersecurity Framework, NIST 800-53, Common Vulnerability Scoring System, ISO 27001, and Information Technology Infrastructure Library.
- Strong cross-functional collaboration, verbal communication, and written communication skills.
- Preferred certifications include Certified Information Systems Security Professional, Global Web Application Penetration Tester, Offensive Security Certified Professional, Certified Secure Software Lifecycle Professional, Certified Ethical Hacker, or equivalent.
- Preferred experience includes application programming interface security, containers, Kubernetes, infrastructure-as-code scanning, penetration testing, bug bounty programs, capture-the-flag competitions, or coordinated vulnerability disclosure.
- Willingness to travel up to 10% and occasional availability outside core business hours for critical incidents, releases, or business priorities.
Benefits
- Hybrid work arrangement with 3 days in the office.
- Up to 10% travel.
- Comprehensive healthcare plans, wellness incentive program, mental wellbeing support, and fitness reimbursement.
- Bonus incentive opportunity, matching 401(k), and stock purchase plan.
- Career development opportunities, employee resource groups, on-demand learning, and tuition reimbursement.
- Paid time off, parental leave, flexible work schedules, and volunteer opportunities.
Tech Stack
Categories
About Conagra Brands
Conagra Brands is a publicly traded packaged foods company that develops, manufactures, and markets shelf-stable, frozen, and snack brands for retail and foodservice customers. Its portfolio includes names such as Birds Eye, Healthy Choice, Marie Callender’s, Hunt’s, Orville Redenbacher’s, and Slim Jim. Founded in 1919 and headquartered in Chicago, it sells primarily across North America through grocery, mass, club, and convenience channels.