Senior IT Application Security Engineer

What You'll be Doing: Develop and provide presentations on application security topics to both technical and non-technical audiences. Advise executive leadership on current and evolving threats to enable risk-informed decisions. Mentor members of the information security team on matters of application security.

Facilitate third-party penetration tests, triage findings, and create remediation plans with development teams. Provide tailored remediation guidance to software developers to address security findings. Provide architectural and security guidance for third-party platforms and services as they integrate into Meijer environments and/or code.

Review the security of third-party/open-source software used by Meijer. Provide risk-based analysis of security posture to drive business decisions. Foster relationships with key business partners to create a culture of security and achieve prioritization of security initiatives.

Develop internal security tooling for identifying or remediating security risks. Assist/lead on matters of application security in the event of an incident. This job profile is not meant to be all inclusive of the responsibilities of this position.

May perform other duties as assigned or required.

What You Bring with You (Qualifications): Bachelor's degree or above in Computer Science, Information Security, or related field. At least four years of professional experience, with at least two years in a security field and at least one year with direct experience writing code. Familiar with object-oriented programming and have written code in one or more programming languages (e.g.

C#, Java, C++). Agile/Scrum, SAFe, or Lean certification preferred. Familiarity with secure coding best practices such as the OWASP Top 10.

Knowledge of common application architectures and the relative risks associated with them (e.g. single page apps, client-server, native mobile, microservices). Foundational knowledge of security practices in several applied contexts, e.g. networking, cloud infrastructure, containerization, operations, audit, or governance.

Knowledge of relevant technology, tools, databases, and development techniques. Strong focus on team dynamics and interpersonal relationships. Strong sense of task ownership with consistent follow-through.

Ability to anticipate risks and devise solutions with limited information or context. Excellent project management, organization, and team collaboration skills. Curiosity to learn.

Capable of defining and measuring key performance indicators. Able to work cross-functionally with IT and business partners across all areas of Meijer and vendor partners. Adaptive, flexible, and responsive to challenges.

Awareness of how security controls influence both internal stakeholders and Meijer customers. SANS/GIAC, CompTIA, ISC2 (e.g. CISSP) or other applicable industry certifications preferred.

We are committed to offering competitive pay that reflects market standards and ensures consistency within our organization. The pay range for this position is listed below. $120,750.00 - $191,000.00 This pay range represents the minimum and maximum base pay for the position, which is determined by factors such as market data, the qualifications required, the level of responsibilities associated with the role and other roles at this same level.

Your specific pay rate within this range will be based on your experience, qualifications, and skills compared to the internal team you'll be joining.

We offer a comprehensive benefits package that includes medical, dental, vision, life insurance, a 401(k) plan with employer match, disability leave, and paid time off (PTO). In addition to these core benefits, we are committed to supporting your overall well-being and career growth. Our offerings include a variety of programs designed to support your personal and professional development, such as paid parental leave, paid education assistance (including free education), a childcare subsidy and more.

We are dedicated to creating a work environment that promotes work-life balance, long-term health and financial security, and continuous professional development The interview process is intended to learn more about your personal skills and experience. To this end, we ask that candidates do not use AI tools during the hiring process.

Please note: Cameras must be turned on during all virtual interviews. AI tools may not be used during any part of the interview process. We opened our doors more than 90 years ago with the goal of helping people provide for themselves and their family.

Today we're a multi-billion dollar retailer with more than 70,000 employees across six states. Our Midwest geography includes corporate offices in Grand Rapids, Michigan, plus manufacturing facilities, distribution centers and over 270 stores across Michigan, Illinois, Indiana, Kentucky, Ohio and Wisconsin. Meijer is an Equal Opportunity Employer, fostering a diverse and inclusive workplace.

We are committed to treating all persons with dignity and respect. Meijer's policy is to not discriminate because of any applicant or team member's race, color, national origin, sex, sexual orientation, gender identity or expression, pregnancy, religion, age, physical or mental disability, uniformed service or veteran status, or any other lawfully-protected classification.

If you have a disability and require a reasonable accommodation to complete any part of your application, please click here to submit your request. Submissions that are not seeking help to complete the application due to a disability will not be responded to.