StockX is hiring a
Application Security Engineer in Worldwide

Summary

The job is for an Application Security Engineer at StockX, a Detroit-based technology leader in the online market for sneakers, apparel, accessories, electronics, collectibles, trading cards, and more. The role involves enhancing the security of software development practices, assisting with secure coding and architecture, conducting code reviews, and more. The candidate should have 3 years in a technical IT security role, GIAC, GSEC, OSCP or other security certifications preferred, experience with web application security, familiarity with SecDevOps and CI/CD best practices, knowledge of cloud security, container security, excellent communication skills, strong problem-solving skills, and willingness to learn.

Requirements

• 3 years in a technical IT security role
• Experience with web application security, including OWASP Top 10 vulnerabilities
• Familiarity with SecDevOps and CI/CD best practices
• Knowledge of cloud security, including AWS
• Knowledge of container security, including Docker or Kubernetes

Responsibilities

• Assist software development architects on secure coding and architecture practices
• Assist with metric collection and application methodologies for internal information risk management efforts
• Consult with teams to ensure data is properly handled throughout our environment
• Collaborate with business, technology, project management, architecture and information security teams to deliver secure solutions that support our business
• Serve as a liaison between the business and IT for technical security projects
• Stay current on information security practices
• Perform qualitative risk assessments on systems and applications
• Work with information security analysts to ensure visibility and security controls are implemented and maintained
• Enhance technologies and processes for information security analysts

Preferred Qualifications

GIAC, GSEC, OSCP or other security certifications

Benefits

• Medical, dental
• Equity
• Discretionary bonuses