Application Security Engineer - Expert

Greif is a global leader in performance packaging located in 40 countries. The company delivers trusted, innovative, and tailored solutions that support some of the world's most in demand and fastest-growing industries.

With a commitment to legendary customer service, operational excellence, and global sustainability, Greif packages life's essentials - and creates lasting value for its colleagues, customers, and other stakeholders.

Learn more about the company's Customized Polymer, Sustainable Fiber, Durable Metal, and Integrated Solutions at www.greif.com and follow Greif on Instagram and LinkedIn.

OUR VISION: 

To Be the Advantage That Helps Our Customers Win.

OUR PURPOSE: 

Creating packaging solutions for life’s essentials.

Job Requisition #:

035984 Application Security Engineer - Expert (Open)

Job Description:

We are looking for an Experienced Application Security Engineer who Designs and implements security controls to protect the organization's applications, APIs, and computer networks from cyber attacks. Develops organization-wide best practices for application and IT security, embedding security requirements into the software development lifecycle. Conducts application security testing, reviews code and architecture for security defects, monitors applications and networks for security issues, and documents all security issues and breaches that are reported.

Key Responsibilities

• Oversees the implementation, monitoring, evaluation, and maintenance of application and IT security systems, policies, and procedures to safeguard the confidentiality, integrity, and availability of the organization's information, systems, and processes.
• Embeds security into the software development lifecycle, defining requirements for secure design, threat modeling, code review, dependency and supply chain management, and pre-release security validation.
• Determines and establishes methodologies for conducting application security testing, vulnerability assessments, and compliance audits, including static analysis, dynamic analysis, software composition analysis, and manual review.
• Leads the evaluation and testing of applications, APIs, third-party integrations, hardware, firmware, and software for possible impact on system security.
• Partners with development and platform teams to triage, prioritize, and drive remediation of application vulnerabilities, establishing severity criteria and remediation timelines.
• Selects, implements, and operates application security tooling, integrating automated testing into CI/CD pipelines and build processes.
• Provides consultation to resolve security incidents such as intrusion, fraud, attacks, leaks, or application-layer compromise. Recommends actions to halt future incidents and improve security.
• Optimizes the organization's application and IT security plans, controls, processes, and procedures and ensures alignment with global standards, regulations, and privacy laws.
• Proactively researches trends, methods, and techniques in application and IT security. Applies and understands security standards and best practice frameworks — such as the OWASP Top 10, NIST SSDF, and ISO/IEC — to mitigate risk.
• Uses expert knowledge of application and IT security principles and practices to educate and advise development teams, business stakeholders, and leadership, championing security objectives and benefits.
• Develops procedures related to incident response, including criteria specific to application security events, and oversees analytics and metrics reporting.

Education and Experience

• Typically possesses Bachelor's degree (or equivalent) and 8-12 years of experience, including substantial hands-on experience in application security.

Knowledge and Skills

• Excellent organization skills and attention to detail.
• Strong analytical and problem-solving skills.
• Thorough understanding of application and IT security and their strategic implications to the organization.
• Working knowledge of secure development practices, common application vulnerability classes, and modern application architectures including APIs, microservices, cloud, and containerized workloads.
• Practical familiarity with application security testing tooling and the ability to validate and contextualize findings rather than relying on scanner output alone.
• Working knowledge of at least one modern programming or scripting language, sufficient to read code and assess security implications.
• Ability to communicate security requirements effectively to both technical and non-technical audiences, including developers and third-party vendors.
• Exceptional ability to plan and execute assigned projects and tasks.
• Exceptional attention to detail and accuracy with the ability to work effectively, independently and in a team environment.

#LI-Hybrid

#LI-CB1

At Greif, we believe that our colleagues are the center of our success. Our Total Rewards have a comprehensive focus on well-being and offer a competitive package that enables you to thrive, be engaged, and reach your full potential.

Compensation Range:

The pay range for this position is Ft22,359,600.00 - Ft38,011,300.00 annually. Typically, a competitive wage for new hires will fall between24,000,000.00 to36,000,000.00 annually. Offers for this position may vary based on market data and other factors such as job-related knowledge, skills, experience, and geographic location. The position may also be eligible for a short-term incentive.

Benefits Statement:

Greif offers a comprehensive benefits package, including competitive core benefits, paid time off, and a range of local benefits for eligible colleagues.

EEO Statement:

We offer a competitive salary, excellent benefits and opportunity for growth. Greif is an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of sex, race, religion, age, national origin, color, disability, veteran status or any other any other legally protected characteristic.

For more information read Greif’s Equal Opportunity Policy.