application security engineer senior (Nashville, TN)

Now Brewing – application security engineer senior! #tobeapartner

From the beginning, Starbucks set out to be a different kind of company. One that not only celebrated coffee and the rich tradition, but that also brought a feeling of connection. We are known for developing extraordinary leaders who share this passion and are guided by their service to others.

This position contributes to Starbucks success through the development and execution of Application Security Engineering Program practices. You will provide security guidance and conduct security assessments to ensure the technology platforms within the organization are implemented in accordance with established standards and policies.

As an application security engineer senior, you will...

• Owns application security services, including SAST, DAST, SCA, penetration testing, bug bounty, and code review.
• Build and improve application security services with a fresh perspective, leveraging AI-driven capabilities where they can increase speed, accuracy, and scale.
• Facilitate remediation of threats by partnering with other cybersecurity teams, providing expert analysis and context.
• Deep expertise in source code management platforms and CI/CD workflows like GitHub Enterprise, GitHub Cloud, GitLab, and Azure Devops, with deep understanding of secure cloud deployment workflow practices.
• Provide hands-on expertise in explaining and correcting OWASP Top 10 and SANS Top 25 issues
• Ability to evaluate AI-provided analysis for accuracy, risk relevance, and remediation quality, ensuring outputs are validated before being used to guide decisions
• Makes recommendations on toolset modifications and improvements, improvements on development processes and production application security support.
• Contributes to the development and delivery of security training programs.
• Participate as a key member in security incident response activities.