Application Security Engineer

Global Payment Holding Company - Lenexa, KS

Full-time - Mid Level

Lenexa, KS

Credit Intermediation and Related Activities

About the position

The Application Security Engineer at Global Payments is responsible for designing and implementing secure applications that meet business functionality and performance needs. This role involves applying security controls within the application development pipeline, reviewing security architecture, interpreting vulnerability scans, and communicating security policies to both technical and non-technical stakeholders. The engineer will work closely with developers and other IT areas to ensure security is integrated throughout the development lifecycle, while also identifying and mitigating vulnerabilities in code.

Responsibilities

• Designs applications of advanced complexity with maximum security applied.
• Applies application development understanding and includes security controls within the application pipeline for moderately complex projects.
• Reviews security architecture designs independently and drafts recommendations.
• Utilizes knowledge of premise or cloud-based security platforms to build implementation guides.
• Interprets vulnerability scanning results to identify and mitigate true issues.
• Communicates InfoSec Architectural and Application Security policies to IT and non-IT resources.
• Builds relationships with developers and stakeholders to incorporate security principles into engineering design.
• Performs testing and validation in application security controls across projects.
• Oversees implementation of defensive practices across infrastructure and applications.
• Drafts and upholds CI/CD security strategy and practices.
• Supports the ability to incorporate security early in the development lifecycle.
• Identifies vulnerabilities in code through assessments and promotes quick remediation.
• Communicates vulnerability results based on risk tolerance and gains support through influential messaging.

Requirements

• Bachelor's Degree in Information Security or Computer Science.
• Typically a minimum of 4 years of relevant experience in Information Security or a related role.
• Strong understanding of regulatory audit requirements and developing solutions to address findings.
• One or more security certifications such as eWPTX, OSWE, CISSP, CEH, CISA, CISM, PCI-QSA, or PA-QSA.

Benefits

• Diversity and inclusion initiatives
• Reasonable accommodations for individuals with disabilities