Cybersecurity Engineer

The Cybersecurity Engineer will be to safeguard the security of our eCommerce platform and mobile applications. The successful candidate will be responsible for ensuring that all web and mobile systems are designed, developed, and maintained with a robust security posture to protect customer data, transaction integrity, and overall system availability. The role requires hands-on experience in web and mobile application security, including secure coding practices, threat mitigation, and incident response.

Role

• Designs, develops, and maintains the security of ecommerce web and mobile applications and their infrastructure
• Implement and configure security solutions, such as firewalls, encryption, authentication, authorization, logging, and monitoring, to protect web applications from cyberattacks and ensure compliance with security policies and regulations
• Perform security audits and reviews, and collaborate with other developers and stakeholders to ensure security integration and alignment
• Monitor, analyze, and respond to security incidents and threats affecting web applications and their infrastructure.
• Maintain and operate Web Application Firewall Configurations for ecommerce and mobile applications
• Work efforts outside business-hours, when necessary, as part of on-call rotation schedule
• Perform false positive analysis on WAF events
• Vulnerability Assessment and Management: Conduct regular vulnerability scans, identify and assess potential weaknesses in our systems and networks, and implement appropriate security controls to address them.

Skills & Qualifications:

• 7+ years’ experience in Cyber Security Engineering for Internet Facing Applications
• Strong understanding of web and mobile application security principles (OWASP Top Ten, CWE, and SANS Top 25).
• Hands-on experience with security testing tools such as Burp Suite, OWASP ZAP, Nessus, and mobile-specific testing tools (e.g., MobSF).
• Proficiency with encryption standards, SSL/TLS, PKI, and API security.
• Experience in securing mobile platforms (iOS, Android) and associated frameworks (React Native, Swift, Kotlin).
• Solid understanding of eCommerce technologies (e.g., payment gateways, session management, secure checkout) including CDN’s (Cloudflare or equivalent)
• Experience in working with Azure cloud infrastructure and FrontDoor CDN
• Familiarity with DevSecOps practices, including integrating security in CI/CD pipelines.
• Strong incident response skills and experience with forensic tools to analyze web and mobile app compromises.
• Ability to manage complex security incidents, including root cause analysis and post-incident reporting.
• Excellent verbal and written communication skills, with the ability to translate complex security issues into actionable recommendations.
• Strong collaboration skills, working cross-functionally with development, operations, and business teams.

Education & Certifications:

• Bachelor's Degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Certifications (Preferred but not mandatory):
  • Certified Information Systems Security Professional (CISSP)
  • Offensive Security Certified Professional (OSCP)
  • Certified Ethical Hacker (CEH)
  • GIAC Web Application Penetration Tester (GWAPT)
  • GIAC Mobile Device Security Analyst (GMOB)

Compensation Details:

$100900-$126100

#LI-CS1

Why should you join our team?

We live our values - W.E.L.I.G.H.T (Winning, Excellence, Love, Integrity, Gratitude, Humility, and Teamwork). Gratitude. Humility. Love. You don’t often see values like these in most corporate statements, but Ace is different. These things are important to us. They represent our commitment to the company, our employees, to Ace retailers and to the Ace brand.

In addition to providing our employees a great culture, Ace also offers competitive benefits* that address life’s necessities and perks, many of which expand and improve year after year, including:

• Incentive opportunities, based on role/grade level (rapid company growth over the past 5 years resulted in incentives being paid out at an average of 122% of your target opportunity!)
• Generous 401(k) retirement savings plan with a fully vested matching contribution the first year in addition to quarterly contributions and annual discretionary contribution (once eligibility requirements have been met).  Over the past 5 years, company contributions (matching, quarterly & discretionary) for fully eligible employees have averaged 9.6% of total eligible compensation
• Comprehensive health coverage (medi