Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

This role will support the evangelization of an application security strategy, contributing to ELC's strategic initiatives in application modernization, DevSecOps, AI, multi-cloud adoption, and multi-site application development. The position directly contributes to the overall global security of ELC's applications, ensuring security is built into the Software Development Life Cycle and the delivery of trusted products and services.

Responsibilities

Review current security processes used in Software Engineering teams and develop optimization strategies.
Coordinate and perform vulnerability assessments using automated and manual tools with development teams.
Provide consulting and mentoring expertise to Developers, DevOps, and Software Engineering teams to implement the DevSecOps program.
Review and analyze vulnerability data to identify security risks and determine false positives.
Prepare security vulnerability and risk management reports for management and stakeholders.
Ensure deployment of best practice Cloud Configuration and Security Management tools and processes.
Coordinate remediation of vulnerabilities within established timeframes.
Integrate secure development practices into agile development processes.

Requirements

Excellent track record and proven ability to produce effective, innovative solutions at an enterprise scale.
Constantly evaluate evolving security, application, and technology industries, making recommendations and influencing adoption.
Good knowledge and understanding of application security vulnerabilities (SANS, OWASP).
Knowledge of Threat modelling and risk analysis.
Thorough understanding of internet technologies and web development best practices.
Strong analytical/problem solving skills and cross functional knowledge across multiple development and security disciplines.
Understanding of Test Automation tools and frameworks such as SAST, DAST, IAST.
Ability to communicate security-related concepts to a broad range of technical and non-technical staff.
High degree of integrity, trustworthiness, and ability to lead and inspire change.
Previous software engineering/architecture experience (Java, C#,.Net, JavaScript) preferred.
Understanding CI/CD pipelines covering source control, integration, and deployment (ex: Bitbucket, Jenkins, JIRA, Artifactory, Nexus, git).
Knowledge in securing cloud deployment and containers (familiarity with Ansible, DeMisto, Docker, and/or Kubernetes).
Some experience with development of RESTful and SOAP web services preferred.
Understanding of advanced iterative Agile methodologies.
Familiarity with micro services architecture and design Patterns.

Skills

Programming and scripting skills in languages such as C#, C/C++, Java, JavaScript, PowerShell, Python.
Experience with APIs: REST, SOAP, SOA and other integrations.
Formal training in the primary development toolset: Tools, Code, Application Engine, SQL/DB Security.

Location

Global

Work Type

Full-time

Experience Level

Enterprise scale
Senior

Salary/Compensations

$90,450.00 - $135,000.00
Eligible for participation in a highly competitive bonus program

Benefits

Health insurance coverage (medical, dental, and vision insurance)
Wellness and family support programs
Life and disability insurance
Retirement savings plans
Paid leave programs
Education-related programs
Paid holidays and vacation time

About the Company

The Estée Lauder Companies Inc. is one of the world’s leading manufacturers, marketers, and sellers of quality skin care, makeup, fragrance, and hair care products.
The company is a steward of luxury and prestige brands globally.
The company's products are sold in approximately 150 countries and territories under brand names including: Estée Lauder, Aramis, Clinique, Lab Series, Origins, M·A·C, La Mer, Bobbi Brown Cosmetics, Aveda, Jo Malone London, Bumble and bumble, Darphin Paris, TOM FORD, Smashbox, AERIN Beauty, Le Labo, Editions de Parfums Frédéric Malle, GLAMGLOW, KILIAN PARIS, Too Faced, Dr.Jart+, the DECIEM family of brands, including The Ordinary and NIOD, and BALMAIN Beauty.

Equal Opportunity

It is Company's policy not to discriminate against any employee or applicant for employment on the basis of race, color, creed, religion, national origin, ancestry, citizenship status, age, sex or gender (including pregnancy, childbirth and related medical conditions), gender identity or gender expression (including transgender status), sexual orientation, marital status, military service and veteran status, physical or mental disability, protected medical condition as defined by applicable state or local law, genetic information, or any other characteristic protected by applicable federal, state, or local laws and ordinances.
The Company will endeavor to provide a reasonable accommodation consistent with the law to otherwise qualified employees and prospective employees with a disability and to employees and prospective employees with needs related to their religious observance or practices.
Should you wish to apply for this position or any other position with the Company and you believe you require assistance to complete an application or participate in an interview, please contact USApplicantAccommodations@Estee.com.
Michigan Applicants: Persons with disabilities needing accommodations for employment must notify the company in writing of the need for an accommodation within 182 days after the date the person with a disability knew or reasonably should have known that an accommodation was needed.
Philadelphia Applicants: Philadelphia's Fair Chance Hiring Law
Rhode Island Applicants: The company is subject to chapters 29-38 of title 28 of the general laws of Rhode Island and is therefore covered by the state's workers' compensation law.