We are looking for a hands-on, dynamic, and enthusiastic application security engineer to help drive our application security efforts. This is an exciting opportunity to join our application security efforts related to the development of various projects in IoT, Intralogistics, Control, Cloud, and Edge systems that aim to transform the industry.


The Sr. Application Security Engineer is an important member of the KION Supply Chain Solutions (SCS) Global Software R&D team. This role is hands-on application security that applies expertise in application security and knowledge of security best practices to the development of existing and future products. The application security engineer not only demonstrates the skills and knowledge of a seasoned hands-on security professional but also participates in efforts to enhance application security and development practices of product teams.

What we offer:

• Career Development

• Competitive Compensation and Benefits

• Pay Transparency

• Global Opportunities

Learn More Here: https://www.dematic.com/en-us/about/careers/what-we-offer

Dematic provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

The base pay range for this role is estimated to be $82,000 - $166,000 at the time of posting. Final compensation will be determined by various factors such as work location, education, experience, knowledge, and skills.

Tasks and Qualifications:

This is What You Will do in This Role:

• Apply coding and testing standards, apply security testing tools including SAST/DAST scanning tools, and conduct code reviews. Apply Secure Software Development Lifecycle (SSLDC) methodologies across organization.
• Identify basic common coding flaws at a high level. Perform penetration testing and integrated quality assurance testing for security functionality and resiliency attack as required for new or updated applications.
• Perform risk analysis (e.g., threat, vulnerability, and probability of occurrence) whenever an application or system undergoes a major change.
• Direct the remediation of security findings and vulnerability prioritization, with development teams, encountered during testing and implementation of new systems or changes to existing systems.
• Capture security controls used during the requirements phase to integrate security within the process, to identify key security objectives, and to maximize software security while minimizing disruption to plans and schedules.

What We are Looking For:

• 5+ years of SAST/DAST scanning experience or 4+ years of penetration testing experience or 5 years of application security experience.
• Experience with security tools such as Qualys, Nessus, Sonarqube, Veracode, Burp Suite, Nexpose, Snort, or Metasploit
• Strong knowledge of security architecture, system, and network security
• Strong experience and in-depth knowledge of security standards and best practices (OWASP, SANS 25, etc.) as it relates to cloud, web, and mobile applications
• Experience in analyzing security of Java applications or cloud-based applications.
• Ability to read and write one or more common programming languages such as Java, JavaScript, C/C++, Python, including 2+ years of hands-on programming or scriptwriting, including 2+ years of working with cloud applications
• Strong Knowledge of Linux and Windows OS

Preferred

• CISSP
• BS in Comp Science

#LI-DP1