1 month ago
Richmond, VA, USAMid Level
Base Salary
$81k - $121k/yr
Responsibilities
- Implement, develop, operate, and improve application security solutions covering static analysis, dynamic analysis, API security, and container security.
- Provide functional and technical expertise on projects with application security implications.
- Learn and coordinate across CarMax’s broader cybersecurity capabilities to improve enterprise security.
- Drive tasks and projects to completion through time management, customer interaction, and cross-functional collaboration.
- Triage support problems and respond with appropriate urgency.
- Participate in a scheduled 24x7 on-call rotation and provide after-hours support as needed.
Requirements
- Understand general cybersecurity concepts and demonstrate interest in application security.
- Have functional understanding of at least one coding or scripting language, such as PowerShell, Python, .NET, JavaScript, or C#.
- Demonstrate analytical, troubleshooting, problem-solving, organization, time-management, and communication skills.
- Be able to estimate project effort and assess the impact required to complete requested work.
- Have a bachelor’s degree in Computer Science, Engineering, Cybersecurity, or a related field, or equivalent alternative education, skills, and/or practical experience.
- Have at least 2 years of work experience in cybersecurity or directly relevant areas.
- Preferred qualifications include DAST experience, SAST experience with the ability to provide recommendations, container lifecycle security experience, and familiarity with image assurance, Kubernetes posture management, secrets management, and runtime threat detection.
- Knowledge of GitHub, Azure DevOps, and TeamCity; public cloud experience with Azure, AWS, or GCP; understanding of development and product teams; and DevSecOps knowledge are preferred.
- CISSP certification is preferred but not required.
- Must be currently authorized to work in the United States on a full-time basis.
Benefits
- Annual paid sick, vacation, and holiday time, with details varying by employment classification and tenure.
- Full-time hourly or commission/incentive-eligible associates may earn up to 48 hours of sick time, 80–200 hours of vacation time after a 90-day waiting period, six paid scheduled holidays, one floating holiday, and holiday premium pay when applicable.
- Full-time salaried associates receive paid time away as needed for sick time, vacation, bereavement, jury duty, holidays, and floating holidays, subject to manager approval.
- The role is based at the CarMax West Creek Home Office in Richmond, Virginia, with onsite work four days per week.
- The role includes a scheduled 24x7 on-call rotation of approximately three weeks per year.
Tech Stack
Categories
About CarMax
We're fueled by a common goal: creating an iconic car-buying experience. We make car-buying fair, accessible, and joyful for all. We are committed to making progress in how we positively impact our society, now and in the future. Above all, we care about people. We are committed to putting people first, including our associates, customers, and communities. Spark positive change alongside us. Here’s your chance to leave a mark. Find the purpose, tools, and resources to go for greatness with teammates by your side. We offer benefits and resources to help make your best life happen. Professional growth and limitless opportunities await. There's no better place to be.