Senior Information Security Administrator

Company Description

Since opening our first self-storage facility in 1972, Public Storage has grown to become the largest owner and operator of self-storage facilities in the world. With thousands of locations across the U.S. and Europe, and more than 170 million net rentable square feet of real estate, we're also one of the largest landlords.

We've been recognized as A Great Place to Work by the Great Place to Work Institute. And, our employees have also voted us as having Best Career Growth, ranked us in the Top 5% for Work Culture, and in the Top 10% for Diversity and Inclusion.

We're a member of the S&P 500 and FT Global 500. Our common and preferred stocks trade on the New York Stock Exchange.

Public Storage is the nation’s leading self-storage provider, recognized for its iconic orange doors and commitment to delivering simple, reliable solutions to millions of customers across the country. We are expanding our creative team to enhance our consistent and engaging visual brand presence.

Job Description

The Senior Information Security Administrator is responsible for strengthening the security of enterprise applications, cloud services, APIs, and development practices. This role partners closely with software engineering, DevOps, architecture, infrastructure, and business teams to identify and remediate application security risks, perform secure code reviews, guide secure design decisions, and embed security controls into the software development lifecycle. The ideal candidate combines hands-on application security experience, a strong development background, cloud security knowledge, and practical security operations expertise to reduce risk across the enterprise.

Key Responsibilities

• Lead or support application security assessments for internally developed, third-party, SaaS, cloud-hosted, web, mobile, and API-based applications.
• Perform secure code reviews and provide actionable remediation guidance for common application security issues, including authentication, authorization, input validation, secrets exposure, insecure dependencies, API abuse, logging gaps, and insecure configuration.
• Partner with development teams to implement secure coding practices throughout the SDLC, including threat modeling, design reviews, peer review standards, and release readiness checks.
• Operate and improve application security tooling such as SAST, DAST, SCA, container scanning, IaC scanning, secrets detection, API security tools, and CI/CD security controls.
• Review application architecture, data flows, cloud deployment patterns, and integration designs to identify security risks before production deployment.
• Translate vulnerability findings into prioritized, risk-based remediation plans and work with application owners, developers, DevOps, and product teams to drive closure.
• Secure application-side configurations, including encryption, session management, authentication flows, authorization models, logging, error handling, secure headers, CORS, API gateways, and secrets management.
• Support cloud security control design and validation across platforms such as Azure, AWS, or GCP, including IAM, network segmentation, workload protection, logging, storage security, key management, and policy-as-code.
• Advise on DevSecOps practices, including secure CI/CD pipelines, branch protection, dependency governance, artifact signing, container hardening, and environment separation.
• Coordinate with security operations teams on application-related incidents, suspicious activity, exploit attempts, and remediation validation.
• Support vulnerability management by validating exploitability, reducing false positives, documenting compensating controls, and tracking remediation evidence.
• Develop and maintain application security standards, secure coding guidelines, design patterns, checklists, procedures, and technical documentation.
• Support audit and compliance activities by providing evidence for secure development, change management, access controls, logging, vulnerability remediation, and cloud security controls.
• Mentor developers, security analysts, and IT teams on application security concepts and practical remediation techniques.

Qualifications

Required Qualifications

• Bachelor’s degree in information security, Computer Science, Software Engineering, Information Technology, or related field; or equivalent combination of education and experience.
• 5-8+ years of experience in cybersecurity, application security, secure software development, DevSecOps, cloud security, or related technology roles.
• Strong development background with practical experience reading, reviewing, or wri