Assoc, Info Systems Security
About The Position
Newell Brands is seeking an experienced Application Security Specialist to join the Global Information Security team and support the organization’s Application Security (AppSec) program. This role will help secure and protect the organization’s global applications, APIs, and AI-enabled solutions by identifying, assessing, and reducing security risks across the software development lifecycle. The Application Security Specialist will work closely with Application Development, DevOps, Product Development, and Information Security teams to implement security best practices, enable the secure adoption of AI-assisted development and AI-powered capabilities, strengthen application, API, and AI security posture, and ensure solutions are designed, developed, and operated securely.
Requirements
- Degree in Information Security, Computer Science, Information Management Systems, or a related field.
- 2+ years of experience in an application security role.
- Strong understanding of secure development practices and common application vulnerabilities (OWASP Top 10, CWE).
- Hands-on experience with application and API security testing tools such as GitHub Advanced Security, Wiz Code, Checkmarx, Snyk, Invicti, Acunetix, Burp Suite, Harness, and Salt Security.
- Familiarity with web technologies, APIs, and modern application architectures.
- Understanding of programming and scripting languages such as Python, Java, JavaScript, C#, or similar.
- Understanding of security frameworks such as NIST, CIS Benchmarks, ISO 27001, or SOC 2.
- Strong attention to detail and ability to communicate technical findings clearly to both technical and non-technical audiences.
Nice To Haves
- Relevant certifications such as GIAC WEB, ISC2 CSSLP, Security+, or equivalent.
- Experience with scripting or automation using PowerShell, Python, Bash, or similar languages.
- Experience with cloud-native source code security (Code-to-Cloud).
- Exposure to AI technologies, including AI-assisted development tools, large language models (LLMs), generative AI applications, or AI-powered services.
- Familiarity with AI security risks and best practices for securing AI-enabled applications and development workflows.
Responsibilities
- Monitor various security platforms (DAST, SAST, SCA, Secret Scanning, API Security, Cloud Security) to investigate and prioritize security risks, vulnerabilities, and misconfigurations in applications and APIs.
- Notify technical and/or business teams of identified application and API risks and track remediation efforts.
- Administer and maintain application and API security platforms including onboarding assets, assessment configuration, managing connectors, user access, and adoption of new features.
- Develop dashboards, reports, and metrics to communicate application and API security risks and progress to leadership and technical stakeholders.
- Partner with application and development teams to improve overall application and API security posture and reduce organizational risk.
- Stay current on emerging threats, vulnerabilities, and cloud security best practices for applications and APIs.
- Assist with integrating security controls and tools into CI/CD pipelines, SDLCs, and development workflows.
- Monitor, assess, and reduce the external exposure of applications and APIs.
- Implement and maintain application and API security standards, policies, and standard operating procedures.
- Assist SOC with detection and response capabilities for applications and APIs.
- Support the security of AI-enabled applications, large language models (LLMs), and AI services by identifying risks, recommending controls, and helping implement AI security best practices.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
Associate degree
