Senior Application Security Engineer - Containers
Senior
Application Security
Container Security
Container Security Scanning
Container Supply Chain Security
Cybersecurity Operations
DevOps
DevSecOps
Information Security
InfoSec
Risk Governance
Risk Management
Sbom Security
Security
Security Automation
Security Compliance
Security Devops
Security Devops Pipelines
Security Operations
Security Testing
Software Security
Vulnerability Exchange
Job Description
ADP offers a hybrid work environment in Alpharetta, GA (also noted: Roseland, NJ) and a comprehensive benefits package designed to support your health, stability, and personal time. You will contribute to container security governance and enable secure development practices through measurable operations, reporting, and DevOps pipeline integration.
This Senior Application Security Engineer - Containers role focuses on building and managing container security scanning services, establishing governance for secure container image use before production, and partnering with teams to strengthen supply chain risk and vulnerability management.
Responsibilities
- Drive container security operations, including supply chain risk initiatives across ADP’s different business units.
- Build and support security within DevOps pipelines, institutionalizing container image scanning in line with shift-left practices.
- Support management of supply chain vulnerabilities, image provenance, adversarial container security, and governance risk and compliance (GRC).
- Assist in developing solutions for Container Security Bill of Materials (CSBom) and Vulnerability Exchange (VEX).
- Promote secure container development through training, governance, and metrics.
- Maintain awareness of container cybersecurity threats and best practices to enable securing and hardening at scale.
- Customize policies, rules, and alerts to align with established policies and settings.
- Serve as a technical SME to drive program excellence and contribute to continuous improvement.
- Identify meaningful KPIs/KRIs to measure progress and drive improvement.
- Provide weekly scanning and monitoring reports.
- Create and maintain Standard Operating Procedures (SOP).
- Perform other duties as required.
Requirements
- Basic knowledge and understanding of container security vulnerabilities (OWASP).
- Understanding of container image formats such as Docker and OCI.
- Experience implementing and rolling out container scanning solutions as part of container development.
- Familiarity with internet technologies and web development secure coding best practices.
- Understanding of CI/CD pipelines including source control, integration, and deployment (examples include Bitbucket, Jenkins, Rally, JIRA, Artifactory, Nexus, SonarQube, git, Snyk).
- Strong analytical and problem-solving skills, with basic cross-functional knowledge across multiple development and security disciplines.
- Experience training development teams on secure container practices.
- Basic understanding of test automation tools and framework, including the NIST Container Security Framework.
- Ability to communicate security concepts to technical and non-technical audiences.
- Understanding of Agile methodologies, Cloud, Container, and Application Security.
- Ability to work effectively as part of a remote team; self-motivated with a positive attitude.
- Bachelor’s degree or equivalent.
- Five years or more experience in various IT or cybersecurity roles, with three or more years specifically in software engineering roles.
- Familiarity with microservices architecture and design patterns.
- Good analytic skills, including qualitative and quantitative data analysis to support data-driven decision-making regarding system threats, vulnerabilities, and risk.
- Plus (not required): CEH, CISSP, CSSLP, GCIA, GPEN, GWAPT.
Technologies
- OWASP, Docker, OCI
- Bitbucket, Jenkins, Rally, JIRA, Artifactory, Nexus, SonarQube, git, Snyk
- Java, C#, .Net, JavaScript, Python
- NIST Container Security Framework
- Container Security Bill of Materials (CSBom), Vulnerability Exchange (VEX)
Benefits
- Medical, Dental, Vision
- Life Insurance
- Matched Retirement Savings
- Wellness Program
- Short-and Long-Term Disability
- Charitable Contribution Match
- Holidays
- Personal Days & Vacation
- Paid Volunteer Time Off
Similar Jobs
