Cybersecurity Engineer IV Application Security

The AES Group•Chicago, TX

13d•Hybrid

About The Position

The AES Group is seeking a Cybersecurity Engineer IV specializing in Application Security to join its Security Engineering team. The role focuses on embedding security throughout the Software Development Lifecycle (SDLC) for external-facing, revenue-generating eCommerce and web applications. The engineer will partner directly with software developers, architects, and technical leaders to build secure applications from design through deployment and production, rather than conducting assessments only after development is complete. The Security Engineering team works with the client’s eCommerce Development organization to improve secure coding practices, identify vulnerabilities early, and implement scalable security solutions. The role includes application security governance, SAST and DAST testing, vulnerability remediation, secure coding guidance, and security integration into CI/CD pipelines and modern development workflows. Candidates should be able to communicate security risks and recommendations to both technical and business stakeholders.

Requirements

Bachelor's degree in Computer Science or a related technical field and 8+ years of Information Security experience, or a Master's degree and 6+ years of Information Security experience.
Strong hands-on experience in Application Security.
Experience integrating security into modern Software Development Lifecycles.
Knowledge of secure software development practices.
Experience with application security governance.
Strong understanding of the complete SDLC, including requirements gathering, application architecture, software development, testing, deployment, production support, and application maintenance.
Experience with application security testing methodologies such as SAST and DAST; experience with any commercial security testing platform is acceptable.
Excellent written and verbal communication skills, including the ability to explain complex cybersecurity concepts to technical and non-technical audiences.
Strong collaboration and stakeholder management skills.
Experience working with software engineers, architects, and technical leadership.
Strong presentation and interpersonal skills.
Ability to influence security decisions across multiple teams.

Nice To Haves

Previous software development experience.
Ability to read and understand application source code.
Experience working alongside software developers.
Experience with secure coding practices.
Experience with security integration within CI/CD pipelines.
Experience with GitHub or similar source control platforms.
AI programming or AI model experience.
Experience utilizing AI tools within software development.
Familiarity with secure DevSecOps practices.

Responsibilities

Partner with software engineering teams to integrate security throughout the Software Development Lifecycle (SDLC).
Embed Security by Design principles into application architecture and development.
Review and improve application security practices across enterprise web applications.
Identify, analyze, prioritize, and help remediate application security vulnerabilities.
Utilize and support security testing throughout the SDLC, including Static and Dynamic Application Security Testing (SAST/DAST).
Analyze application code when necessary to identify security risks and recommend remediation.
Collaborate with developers to implement secure coding practices.
Communicate security risks, findings, and recommendations to software engineers, technical leadership, and business stakeholders.
Provide guidance on secure software development, application security governance, and security best practices.
Support security integration within CI/CD pipelines and modern development workflows.
Educate development teams on application security principles and secure development methodologies.