Staff Application Security Engineer

Western Governors University•Salt Lake City, UT

1d•Onsite

About The Position

If you’re passionate about building a better future for individuals, communities, and our country—and you’re committed to working hard to play your part in building that future—consider WGU as the next step in your career. Driven by a mission to expand access to higher education through online, competency-based degree programs, WGU is also committed to being a great place to work for a diverse workforce of student-focused professionals. The university has pioneered a new way to learn in the 21st century, one that has received praise from academic, industry, government, and media leaders. Whatever your role, working for WGU gives you a part to play in helping students graduate, creating a better tomorrow for themselves and their families. The salary range for this position takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. At WGU, it is not typical for an individual to be hired at or near the top of the range for their position, and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is: Grade: Technical 410 Pay Range: $140,200.00 - $217,200.00 Job Description The Staff IT Security Analyst is a position of technical expertise and leadership in the security technology function. They will use their knowledge of current security methods and standards to gather operational information and access and analyze tools, systems, and processes in defense of applications, systems, and networks and collaborate with Infrastructure and business teams. They will act as a lead support role for the IT Security team and provide mentorship to lower level analysts. They will also engage in the support of security focused tools and services. In addition, they may be asked to assist with risk assessments, forensics analysis, data collection, user training and other security related tasks. Our Information Security team is dedicated to safeguarding WGU’s systems, applications, and networks in an ever-changing security landscape. We thrive on collaboration and innovation, working together to protect critical assets and ensure a secure environment for students and staff. As a Staff Application Security Engineer, you will play a key role in defending WGU’s applications and infrastructure. You’ll leverage your advanced knowledge of security methods and standards to assess tools, systems, and processes; mentor security engineers and software developers; and lead efforts to strengthen our security posture.

Requirements

CISSP certification or equivalent knowledge and experience
8+ years of Information Security experience, with at least 4 in application security-specific roles
Meaningful experience in multiple information security domains
Strong written and oral communication skills
The ability to forge positive and constructive relationships with individuals and organizations outside the Security team
An innate understanding of the importance of, and demonstrated experience in aligning and managing customer expectations
Ability to work effectively in both conceptual/architectural and technical implementation roles

Nice To Haves

Experience with integration and automation of security tools.
Familiarity with cloud security practices and modern DevSecOps methodologies.

Responsibilities

Analyze projects, systems, processes, and future initiatives to identify actual and potential security threats and identify requirements and recommendations to mitigate them.
Consult with business units on security best practices and approaches at all project and system phases – from ideation, architecture, design, build, deployment, and maintenance through retirement.
Identify, contextualize, articulate, and communicate security risk issues.
Lead or coordinate efforts to remediate security issues across multiple security domains.
Work with project and development teams to integrate the security lifecycle into their system and product development lifecycles.
Mentor security, technology, and development staff to continually elevate security awareness and practices.
Design, build, and use security policies, standards, tools, and processes.
Develop and maintain documentation for security systems and processes.
Evaluate, select, test, and implement security-focused products and services.