Application Security Engineer - Expert
Greif, Inc.3 days ago
Budapest, HungarySenior / Staff+
Responsibilities
- Design and implement security controls for applications, APIs, networks, and related systems.
- Embed secure design, threat modeling, code review, dependency and supply chain management, and security validation into the software development lifecycle.
- Establish and conduct application security testing, vulnerability assessments, compliance audits, static analysis, dynamic analysis, software composition analysis, and manual reviews.
- Evaluate applications, APIs, third-party integrations, hardware, firmware, and software for security impact.
- Partner with development and platform teams to prioritize vulnerabilities and drive remediation according to severity and timelines.
- Select, implement, and operate application security tooling and integrate automated testing into CI/CD pipelines and build processes.
- Consult on application security incidents, recommend preventive actions, and develop application security incident response procedures.
- Maintain security plans, controls, processes, and procedures in alignment with standards, regulations, and privacy laws.
- Research application and IT security trends and advise development teams, stakeholders, and leadership.
- Oversee application security analytics and metrics reporting.
Requirements
- Bachelor's degree or equivalent and typically 8–12 years of experience, including substantial hands-on application security experience.
- Thorough understanding of application and IT security and its strategic implications.
- Working knowledge of secure development practices, common application vulnerabilities, APIs, microservices, cloud, and containerized workloads.
- Practical familiarity with application security testing tools and the ability to validate and contextualize findings beyond scanner output.
- Working knowledge of at least one modern programming or scripting language sufficient to read code and assess security implications.
- Knowledge of the OWASP Top 10, NIST SSDF, ISO/IEC standards, and security best practices.
- Strong analytical, problem-solving, organizational, communication, planning, and attention-to-detail skills.
- Ability to communicate security requirements to technical and non-technical audiences, including developers and third-party vendors.
- Ability to work independently and collaboratively while executing assigned projects and tasks.
Benefits
- Hybrid work arrangement.
- Comprehensive benefits package with competitive core benefits and local benefits for eligible colleagues.
- Paid time off.
- Potential eligibility for a short-term incentive.
- Opportunity for growth.
Categories
About Greif, Inc.
Greif, Inc. designs and manufactures industrial packaging for manufacturers and distributors, including steel, plastic and fibre drums, intermediate bulk containers, containerboard and recycled paperboard, tubes and cores, and reconditioned containers. It also provides packaging accessories, filling and other services, and manages timber properties in the southeastern United States. Founded in 1877 and headquartered in Delaware, Ohio, the NYSE-listed company serves customers in more than 35 countries.