Vulnerability Exchange Engineer Jobs

1 job found

Today

Senior Application Security Engineer - Containers

ADP Alpharetta, GA

Alpharetta, GA

Today

$75k - $184k/yr Full time Senior Application Security Container Security

Apply Now

Job Description

ADP offers a hybrid work environment in Alpharetta, GA (also noted: Roseland, NJ) and a comprehensive benefits package designed to support your health, stability, and personal time. You will contribute to container security governance and enable secure development practices through measurable operations, reporting, and DevOps pipeline integration.

This Senior Application Security Engineer - Containers role focuses on building and managing container security scanning services, establishing governance for secure container image use before production, and partnering with teams to strengthen supply chain risk and vulnerability management.

Responsibilities

Drive container security operations, including supply chain risk initiatives across ADP’s different business units.
Build and support security within DevOps pipelines, institutionalizing container image scanning in line with shift-left practices.
Support management of supply chain vulnerabilities, image provenance, adversarial container security, and governance risk and compliance (GRC).
Assist in developing solutions for Container Security Bill of Materials (CSBom) and Vulnerability Exchange (VEX).
Promote secure container development through training, governance, and metrics.
Maintain awareness of container cybersecurity threats and best practices to enable securing and hardening at scale.
Customize policies, rules, and alerts to align with established policies and settings.
Serve as a technical SME to drive program excellence and contribute to continuous improvement.
Identify meaningful KPIs/KRIs to measure progress and drive improvement.
Provide weekly scanning and monitoring reports.
Create and maintain Standard Operating Procedures (SOP).
Perform other duties as required.

Requirements

Basic knowledge and understanding of container security vulnerabilities (OWASP).
Understanding of container image formats such as Docker and OCI.
Experience implementing and rolling out container scanning solutions as part of container development.
Familiarity with internet technologies and web development secure coding best practices.
Understanding of CI/CD pipelines including source control, integration, and deployment (examples include Bitbucket, Jenkins, Rally, JIRA, Artifactory, Nexus, SonarQube, git, Snyk).
Strong analytical and problem-solving skills, with basic cross-functional knowledge across multiple development and security disciplines.
Experience training development teams on secure container practices.
Basic understanding of test automation tools and framework, including the NIST Container Security Framework.
Ability to communicate security concepts to technical and non-technical audiences.
Understanding of Agile methodologies, Cloud, Container, and Application Security.
Ability to work effectively as part of a remote team; self-motivated with a positive attitude.
Bachelor’s degree or equivalent.
Five years or more experience in various IT or cybersecurity roles, with three or more years specifically in software engineering roles.
Familiarity with microservices architecture and design patterns.
Good analytic skills, including qualitative and quantitative data analysis to support data-driven decision-making regarding system threats, vulnerabilities, and risk.
Plus (not required): CEH, CISSP, CSSLP, GCIA, GPEN, GWAPT.

Technologies

OWASP, Docker, OCI
Bitbucket, Jenkins, Rally, JIRA, Artifactory, Nexus, SonarQube, git, Snyk
Java, C#, .Net, JavaScript, Python
NIST Container Security Framework
Container Security Bill of Materials (CSBom), Vulnerability Exchange (VEX)

Benefits

Medical, Dental, Vision
Life Insurance
Matched Retirement Savings
Wellness Program
Short-and Long-Term Disability
Charitable Contribution Match
Holidays
Personal Days & Vacation
Paid Volunteer Time Off

View full job page →

Get Vulnerability Exchange Engineer Jobs alerts

New Vulnerability Exchange Engineer Jobs, daily.