Cybersecurity Engineer ( Application Security )

Discover. A brighter future.

With us, you’ll do meaningful work from Day 1. Our collaborative culture is built on three core behaviors: We Play to Win, We Get Better Every Day & We Succeed Together. And we mean it — we want you to grow and make a difference at one of the world's leading digital banking and payments companies. We value what makes you unique so that you have an opportunity to shine.

Come build your future, while being the reason millions of people find a brighter financial future with Discover.

Job Description:

What You’ll Do
 

• Engineers solutions in alignment with the Cybersecurity engineering road map, and maintains processes for the delivery of highly-complex secure systems, cyber applications, technical projects and regulatory and risk requirements. Facilitates process engineering, risk remediation, and mitigation of operational risk in a high velocity culture by collaborating to introduce technology, requirements, deliverables, gaps and systems design. Contributes to analyzing cyber technologies, metrics models, and performance indicators. Identifies robust solutions and build resilient next-generation systems to solve business challenges and enhance the control environment

• Actively manages and escalates risk and customer-impacting issues within the day-to-day role to management

How You’ll Do It
 

• Analyzes, designs and develops security solutions with Cybersecurity architects to ensure it is

• Serves as the subject matter expert for supported security technologies, and act as subject

• Validates current and future state architectural models to assess impact across assigned Cybersecurity technology systems. Oversees security requirements and technical specifications

• Provides direction to infrastructure, operations, data and application developments groups throughout transitioning phase, implementation in production and beyond.

• Manages relationships with security partners and vendors. Builds and maintains effective

• Maintains knowledge of engineering next-gen designs, security trends, threats and attack techniques

Internal applicants only: technical proficiency rating of Competent on the Dreyfus Cyber engineering scale.

Minimum Qualifications

At a minimum, here’s what we need from you:

• Bachelors – Computer Science,  Engineering, Informatics, Information Security, Information Technology or related

• 3+ years – Information Security, Application Security, Security Engineering or related

Physical and Cognitive Requirements
The physical requirements described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable a qualified individual with disabilities to perform the essential functions of the position as required by federal, state, and local laws:

Primarily remain in a stationary position.

Primarily performed indoors in an office setting

Ability to operate office equipment such as but not limited to computer, telephone, printer, and calculator.

Ability to communicate verbally.; Ability to communicate in written form.

Travel up to 10% of the time.

Bonus Points If You Have
 

• Working experience with Secrets Scanning, SAST, IAST, DAST and SCA tools

• Engineering experience using CI/CD tools such as Jenkins, Ansible, Terraform, AWS, Kubernetes and Docker

• Engineering experience with languages such as Python, Typescript, Javascript

• Working knowledge of Java, Node, NPM, Maeven, PyPi and other common application development languages and frameworks

• Engineering experience with APIs and Integration engineering

• Experience creating robust automation scripts and engines

• Experience working in an agile environment

• Experience with common vulnerability frameworks such as CVSS 2.0+, CWE, OWASP

• Common knowledge of regulatory frameworks such as PCI and FDIC

External applicants will be required to perform a technical interview.

Discover will not sponsor or transfer employment work visas for this position. Applicants must be currently authorized to work in