Cybersecurity Engineer

Ace Hardware • Oak Brook, IL

422d • $100,900 - $126,100

About The Position

The Cybersecurity Engineer at Ace Hardware is responsible for safeguarding the security of the company's eCommerce platform and mobile applications. This role involves designing, developing, and maintaining secure web and mobile systems to protect customer data and ensure transaction integrity. The successful candidate will have hands-on experience in web and mobile application security, including secure coding practices, threat mitigation, and incident response.

Requirements

• 7+ years' experience in Cyber Security Engineering for Internet Facing Applications.
• Strong understanding of web and mobile application security principles (OWASP Top Ten, CWE, and SANS Top 25).
• Hands-on experience with security testing tools such as Burp Suite, OWASP ZAP, Nessus, and mobile-specific testing tools.
• Proficiency with encryption standards, SSL/TLS, PKI, and API security.
• Experience in securing mobile platforms (iOS, Android) and associated frameworks (React Native, Swift, Kotlin).
• Solid understanding of eCommerce technologies including payment gateways and secure checkout.
• Experience working with Azure cloud infrastructure and FrontDoor CDN.
• Familiarity with DevSecOps practices, including integrating security in CI/CD pipelines.
• Strong incident response skills and experience with forensic tools.

Nice To Haves

• Certified Information Systems Security Professional (CISSP)
• Offensive Security Certified Professional (OSCP)
• Certified Ethical Hacker (CEH)
• GIAC Web Application Penetration Tester (GWAPT)
• GIAC Mobile Device Security Analyst (GMOB)

Responsibilities

• Design, develop, and maintain the security of eCommerce web and mobile applications and their infrastructure.
• Implement and configure security solutions such as firewalls, encryption, authentication, authorization, logging, and monitoring.
• Perform security audits and reviews, collaborating with developers and stakeholders to ensure security integration.
• Monitor, analyze, and respond to security incidents and threats affecting web applications and their infrastructure.
• Maintain and operate Web Application Firewall configurations for eCommerce and mobile applications.
• Work outside business hours as part of an on-call rotation schedule when necessary.
• Conduct false positive analysis on WAF events.
• Perform regular vulnerability assessments and management, identifying and addressing potential weaknesses.

Benefits

• Incentive opportunities based on role/grade level.
• Generous 401(k) retirement savings plan with matching contributions.
• Comprehensive health coverage including medical, dental, vision, and disability.
• 21 days of vacation immediately available and up to 6 paid holidays.
• Company car, phone, and fuel card for field-based positions.
• Annual Ace Cares Week with 20 hours off to volunteer.
• Tuition assistance program and professional development opportunities.
• Employee discounts on Ace merchandise and other services.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Building Material and Garden Equipment and Supplies Dealers
• Education Level: Bachelor's degree
• Number of Employees: 5,001-10,000 employees