{"schemaVersion":"jobsearcher.job.v1","id":"ef946f56b407db4c1b3cdcec","url":"https://jobsearcher.com/jobs/ef946f56b407db4c1b3cdcec","canonicalUrl":"https://jobsearcher.com/jobs/ef946f56b407db4c1b3cdcec","title":"Application Engineer, Cyber Security (Remote)","description":"The Application Engineer, Cyber Security is responsible for building, managing and supporting information security that underpins all internal and external user technology services, according to security policies and best practices.\n\nThe Application Engineer, Cyber Security has strong development experience in numerous programming languages and is the subject matter expert (SME) for concepts behind security controls and how they apply to application development, web presence and API services. This individual is accountable for identifying weaknesses in our security posture within the application or web space while defining methods to achieve security control requirements via automation or highly efficient means that further support timely delivery with minimal overhead. They work across internal and external teams of infrastructure specialists and software engineers making sure services are delivered and used securely as required, offering advice and guidance on security decisions and ensuring the effective use of common tools and patterns.\n\nThe incumbent must have a service-oriented mentality, a high sense of ownership of the problems and requests assigned, a focus on managing and resolving issues in alignment with the SLAs, establishing and maintaining communication with technology customers to keep them updated with status of their requests, initiating and performing changes on production systems and proactively escalating any issues that cannot be resolved within the established timeframes.\n\nAdditional insights, experience or background in any of the following are also of great value: NIST, ISO27001, Data Protection, Java Development, Static Code Analysis, Dynamic Code Analysis, Penetration Testing, Containers, MicroServices, CI/CD Pipeline, Agile, Git, Jira, Docker, Kubernetes, cloud security (AWS, Azure, GCP) and design, process maturity, and other related focuses.\nPrimary Accountabilities:\nTechnical (80%)\nBe the security representative for multiple product lines and act as the point of contact for software engineering and security.\nPerform architecture reviews to steer projects in the right direction, participate in security code reviews, and automate penetration testing against products prior to move to production.\nSupport software engineering with implementing security fixes, ensuring security scanners are utilized correctly, and develop strategies to proactively secure their architecture.\nReview development frameworks for security functionality, consistency, and uplift opportunities.\nCreate threat models and leverage them to prioritize time based on risk impact.\nEvaluate client needs, coordinate design for a solution, and clearly communicate the value proposition of complex and highly technical subjects.\nImplement and/or assess existing security controls.\nTranslate logical designs into physical designs; produce detailed designs and document all work using required standards, methods and tools, including prototyping tools where appropriate.\nDesign systems characterized by managed levels of risk, manageable business and technical complexity and meaningful impact; works with well-understood technology and identifies appropriate patterns.\nProject Management (20%)\nWork with application development teams to ensure secure software development lifecycle (S-SDLC) implementation and validation.\nEducate and train product teams.\nEvaluate client needs, coordinate design for a solution, and clearly communicate the value proposition of complex and highly technical cyber security subjects.\nRequired Qualifications:\nBachelor’s degree in Computer Science, Information Technology or related field\n8-10 years of related work experience with vulnerability management\nOr any equivalent combination of experience and training/certification that provides the required knowledge, skills, and abilities needed to complete the major responsibilities/essential functions of the position\nCertifications preferred. OSCP, CISSP, GCIH, GXPN, GPEN\nWorking experience in web and mobile application security\nWorking experience in distributed platform development security and design\nIn-depth knowledge of web and mobile security standards and best practices (OWASP, etc.)\nStrong foundation in core information security principles and concepts (HTTPS, TLS, OAuth, etc.)\nWorking experience with industry tools and technologies such as Burp, Metasploit, etc.\nWorking knowledge of common languages such as Python, GO, Javascript, Java, etc.\nFamiliarity in public cloud security deployment and implementation issues (AWS, Azure, GCP)\nFamiliarity with audits and standards requirements such ISO 27001, PCI DSS, SOC 1 & 2, etc.\nProven expertise in enterprise-grade and web scale security solutions\nSpecific Technical Skills Needed:\nSecurity and Risk Assessment\nAware of Security governance principles and able to apply them to the enterprise\nUnderstands the legal and regulatory Issues relevant to the enterprise and does not place the enterprise at risk.\nSecurity Engineering\nWorking knowledge of secure design principles\nWorking knowledge of database security\nWorking knowledge of cloud computing\nWorking knowledge of Cryptography\nIdentity and Access Management\nPhysical and logical access\nLDAP\nMulti-factor authentication\nSession management\nCredential management\nSoftware Development Security\nWorking knowledge of software development lifecycles\nWorking knowledge of what software development methodologies are used in the enterprise and can explain what it means\nFamiliar with DevOps concepts\nWorking knowledge of security vulnerabilities and understands how the following work: Bounds checking, Input/output validation, Buffer overflow, Privilege escalation\nWorking knowledge of secure coding practices\nWorking knowledge of code repositories\n\nIndividual Competencies:\nIntegrity: Gains the trust of others by taking responsibility for own actions and telling the truth.\nTeamwork: Builds relationships and works cooperatively with others, inside and outside the organization, to accomplish objectives to build and maintain mutually-beneficial partnerships, leverage information and achieve results.\nAdaptable: Responds to change with a willingness to learn new ways to accomplish work objectives with a positive attitude.\nInnovative: Ability to develop, sponsor, or support the introduction of new and improved methods, products, procedures or technologies.\nCurious: A desire to inquire and learn, to seek new knowledge and wisdom, and to listen to the contributions of others with a genuine interest to better self, the team, and the organization.\nAnalytical and Critical Thinking: Ability to tackle a problem by using a logical, systematic, sequential approach.\nProblem Solving: Gathers and analyzes information to generate and evaluate potential solutions to problems, issues and challenges while weighing the accuracy and relevance of the facts, data and information.\nThe physical demands described here are representative of those that must be met by an associate to successfully perform the major job responsibilities (essential functions) of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the major job responsibilities. This job description is not intended to be an exhaustive list of all duties, responsibilities, or qualifications associated with the job.\nWhile performing the duties of this job, the associate is:\nRegularly required to use hands to finger, handle or feel objects, tools or controls, and reach with hands or arms.\nRegularly required to talk or hear and read instructions on a computer monitor and/or printed on paper.\nOccasionally required to stand, kneel or stoop, and lift and/or move up to ## pounds.\nRegularly required to view items at an extremely close range and must be able to adjust and readjust focus.\nOccasionally: Job requires this activity up to 33% of the time\nFrequently: Job requires this activity between 33% - 66% of the time\nRegularly: Job requires this activity more than 66% of the time\nSafety:\nSupport a safe work environment by following safety rules and regulations and reporting all safety hazards.\nAs an Inmar Associate, you:\nPut clients first and consistently display a positive attitude and behaviors that demonstrate an awareness and willingness to listen and respond to clients in order to meet their short-term and long-term needs, requirements and exceed their expectations.\nTreat clients and teammates with courtesy, consideration and tact; you also have the ability to perceive the needs of internal and external clients and communicate effectively with the objective of delighting and retaining the client.\nBuild collaborative relationships and work cooperatively with others, inside and outside the organization, to accomplish objectives, develop and maintain mutually-beneficial partnerships, leverage information to achieve results.\nSet and attain achievable, yet aggressive, goals with a sense of urgency and accountability.\nUnderstand that results are important and focus on turning mission into action to achieve results following the principles of Flawless Execution while consistently complying with quality, service and productivity standards to meet deadlines and exceed expectations by giving our clients the best possible outcome.\nWe are an Equal Opportunity Employer, including disability/vets.","company":"Inmar","rawCompany":"inmar","isRemote":true,"isActive":false,"createdAt":"2026-04-12T20:24:29.488Z","occupations":[{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Application Engineer, Cyber Security (Remote)","description":"The Application Engineer, Cyber Security is responsible for building, managing and supporting information security that underpins all internal and external user technology services, according to security policies and best practices.\n\nThe Application Engineer, Cyber Security has strong development experience in numerous programming languages and is the subject matter expert (SME) for concepts behind security controls and how they apply to application development, web presence and API services. This individual is accountable for identifying weaknesses in our security posture within the application or web space while defining methods to achieve security control requirements via automation or highly efficient means that further support timely delivery with minimal overhead. They work across internal and external teams of infrastructure specialists and software engineers making sure services are delivered and used securely as required, offering advice and guidance on security decisions and ensuring the effective use of common tools and patterns.\n\nThe incumbent must have a service-oriented mentality, a high sense of ownership of the problems and requests assigned, a focus on managing and resolving issues in alignment with the SLAs, establishing and maintaining communication with technology customers to keep them updated with status of their requests, initiating and performing changes on production systems and proactively escalating any issues that cannot be resolved within the established timeframes.\n\nAdditional insights, experience or background in any of the following are also of great value: NIST, ISO27001, Data Protection, Java Development, Static Code Analysis, Dynamic Code Analysis, Penetration Testing, Containers, MicroServices, CI/CD Pipeline, Agile, Git, Jira, Docker, Kubernetes, cloud security (AWS, Azure, GCP) and design, process maturity, and other related focuses.\nPrimary Accountabilities:\nTechnical (80%)\nBe the security representative for multiple product lines and act as the point of contact for software engineering and security.\nPerform architecture reviews to steer projects in the right direction, participate in security code reviews, and automate penetration testing against products prior to move to production.\nSupport software engineering with implementing security fixes, ensuring security scanners are utilized correctly, and develop strategies to proactively secure their architecture.\nReview development frameworks for security functionality, consistency, and uplift opportunities.\nCreate threat models and leverage them to prioritize time based on risk impact.\nEvaluate client needs, coordinate design for a solution, and clearly communicate the value proposition of complex and highly technical subjects.\nImplement and/or assess existing security controls.\nTranslate logical designs into physical designs; produce detailed designs and document all work using required standards, methods and tools, including prototyping tools where appropriate.\nDesign systems characterized by managed levels of risk, manageable business and technical complexity and meaningful impact; works with well-understood technology and identifies appropriate patterns.\nProject Management (20%)\nWork with application development teams to ensure secure software development lifecycle (S-SDLC) implementation and validation.\nEducate and train product teams.\nEvaluate client needs, coordinate design for a solution, and clearly communicate the value proposition of complex and highly technical cyber security subjects.\nRequired Qualifications:\nBachelor’s degree in Computer Science, Information Technology or related field\n8-10 years of related work experience with vulnerability management\nOr any equivalent combination of experience and training/certification that provides the required knowledge, skills, and abilities needed to complete the major responsibilities/essential functions of the position\nCertifications preferred. OSCP, CISSP, GCIH, GXPN, GPEN\nWorking experience in web and mobile application security\nWorking experience in distributed platform development security and design\nIn-depth knowledge of web and mobile security standards and best practices (OWASP, etc.)\nStrong foundation in core information security principles and concepts (HTTPS, TLS, OAuth, etc.)\nWorking experience with industry tools and technologies such as Burp, Metasploit, etc.\nWorking knowledge of common languages such as Python, GO, Javascript, Java, etc.\nFamiliarity in public cloud security deployment and implementation issues (AWS, Azure, GCP)\nFamiliarity with audits and standards requirements such ISO 27001, PCI DSS, SOC 1 & 2, etc.\nProven expertise in enterprise-grade and web scale security solutions\nSpecific Technical Skills Needed:\nSecurity and Risk Assessment\nAware of Security governance principles and able to apply them to the enterprise\nUnderstands the legal and regulatory Issues relevant to the enterprise and does not place the enterprise at risk.\nSecurity Engineering\nWorking knowledge of secure design principles\nWorking knowledge of database security\nWorking knowledge of cloud computing\nWorking knowledge of Cryptography\nIdentity and Access Management\nPhysical and logical access\nLDAP\nMulti-factor authentication\nSession management\nCredential management\nSoftware Development Security\nWorking knowledge of software development lifecycles\nWorking knowledge of what software development methodologies are used in the enterprise and can explain what it means\nFamiliar with DevOps concepts\nWorking knowledge of security vulnerabilities and understands how the following work: Bounds checking, Input/output validation, Buffer overflow, Privilege escalation\nWorking knowledge of secure coding practices\nWorking knowledge of code repositories\n\nIndividual Competencies:\nIntegrity: Gains the trust of others by taking responsibility for own actions and telling the truth.\nTeamwork: Builds relationships and works cooperatively with others, inside and outside the organization, to accomplish objectives to build and maintain mutually-beneficial partnerships, leverage information and achieve results.\nAdaptable: Responds to change with a willingness to learn new ways to accomplish work objectives with a positive attitude.\nInnovative: Ability to develop, sponsor, or support the introduction of new and improved methods, products, procedures or technologies.\nCurious: A desire to inquire and learn, to seek new knowledge and wisdom, and to listen to the contributions of others with a genuine interest to better self, the team, and the organization.\nAnalytical and Critical Thinking: Ability to tackle a problem by using a logical, systematic, sequential approach.\nProblem Solving: Gathers and analyzes information to generate and evaluate potential solutions to problems, issues and challenges while weighing the accuracy and relevance of the facts, data and information.\nThe physical demands described here are representative of those that must be met by an associate to successfully perform the major job responsibilities (essential functions) of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the major job responsibilities. This job description is not intended to be an exhaustive list of all duties, responsibilities, or qualifications associated with the job.\nWhile performing the duties of this job, the associate is:\nRegularly required to use hands to finger, handle or feel objects, tools or controls, and reach with hands or arms.\nRegularly required to talk or hear and read instructions on a computer monitor and/or printed on paper.\nOccasionally required to stand, kneel or stoop, and lift and/or move up to ## pounds.\nRegularly required to view items at an extremely close range and must be able to adjust and readjust focus.\nOccasionally: Job requires this activity up to 33% of the time\nFrequently: Job requires this activity between 33% - 66% of the time\nRegularly: Job requires this activity more than 66% of the time\nSafety:\nSupport a safe work environment by following safety rules and regulations and reporting all safety hazards.\nAs an Inmar Associate, you:\nPut clients first and consistently display a positive attitude and behaviors that demonstrate an awareness and willingness to listen and respond to clients in order to meet their short-term and long-term needs, requirements and exceed their expectations.\nTreat clients and teammates with courtesy, consideration and tact; you also have the ability to perceive the needs of internal and external clients and communicate effectively with the objective of delighting and retaining the client.\nBuild collaborative relationships and work cooperatively with others, inside and outside the organization, to accomplish objectives, develop and maintain mutually-beneficial partnerships, leverage information to achieve results.\nSet and attain achievable, yet aggressive, goals with a sense of urgency and accountability.\nUnderstand that results are important and focus on turning mission into action to achieve results following the principles of Flawless Execution while consistently complying with quality, service and productivity standards to meet deadlines and exceed expectations by giving our clients the best possible outcome.\nWe are an Equal Opportunity Employer, including disability/vets.","datePosted":"2026-04-12T20:24:29.488Z","dateModified":"2026-04-12T20:24:29.488Z","hiringOrganization":{"@type":"Organization","name":"Inmar","sameAs":"https://jobsearcher.com"},"jobLocationType":"TELECOMMUTE","applicantLocationRequirements":{"@type":"Country","name":"US"},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"ef946f56b407db4c1b3cdcec"},"url":"https://jobsearcher.com/jobs/ef946f56b407db4c1b3cdcec"}}