Embeds security into the software development lifecycle, defining requirements for secure design, threat modeling, code review, dependency and supply chain management, and pre-release security validation.
Determines and establishes methodologies for conducting application security testing, vulnerability assessments, and compliance audits, including static analysis, dynamic analysis, software composition analysis, and manual review.
Leads the evaluation and testing of applications, APIs, third-party integrations, hardware, firmware, and software for possible impact on system security.
Partners with development and platform teams to triage, prioritize, and drive remediation of application vulnerabilities, establishing severity criteria and remediation timelines.
Selects, implements, and operates application security tooling, integrating automated testing into CI/CD pipelines and build processes.
Provides consultation to resolve security incidents such as intrusion, fraud, attacks, leaks, or application-layer compromise. Recommends actions to halt future incidents and improve security.
Optimizes the organization's application and IT security plans, controls, processes, and procedures and ensures alignment with global standards, regulations, and privacy laws.
Proactively researches trends, methods, and techniques in application and IT security. Applies and understands security standards and best practice frameworks — such as the OWASP Top 10, NIST SSDF, and ISO/IEC — to mitigate risk.
Uses expert knowledge of application and IT security principles and practices to educate and advise development teams, business stakeholders, and leadership, championing security objectives and benefits.
Develops procedures related to incident response, including criteria specific to application security events, and oversees analytics and metrics reporting.
Education and Experience
Typically possesses Bachelor's degree (or equivalent) and 8-12 years of experience, including substantial hands-on experience in application security.
Knowledge and Skills
Excellent organization skills and attention to detail.
Strong analytical and problem-solving skills.
Thorough understanding of application and IT security and their strategic implications to the organization.
Working knowledge of secure development practices, common application vulnerability classes, and modern application architectures including APIs, microservices, cloud, and containerized workloads.
Practical familiarity with application security testing tooling and the ability to validate and contextualize findings rather than relying on scanner output alone.
Working knowledge of at least one modern programming or scripting language, sufficient to read code and assess security implications.
Ability to communicate security requirements effectively to both technical and non-technical audiences, including developers and third-party vendors.
Exceptional ability to plan and execute assigned projects and tasks.
Exceptional attention to detail and accuracy with the ability to work effectively, independently and in a team environment.
#LI-Hybrid
#LI-CB1
At Greif, we believe that our colleagues are the center of our success. Our Total Rewards have a comprehensive focus on well-being and offer a competitive package that enables you to thrive, be engaged, and reach your full potential.
Compensation Range
The pay range for this position is Ft22,359,600.00 - Ft38,011,300.00 annually. Typically, a competitive wage for new hires will fall between24,000,000.00 to36,000,000.00 annually. Offers for this position may vary based on market data and other factors such as job-related knowledge, skills, experience, and geographic location. The position may also be eligible for a short-term incentive.
Benefits Statement
Greif offers a comprehensive benefits package, including competitive core benefits, paid time off, and a range of local benefits for eligible colleagues.
Protect Yourself From Scams: We value the integrity of our recruitment process and prioritize the well-being of our candidates. While you may find Greif job postings on various platforms, all legitimate opportunities can be verified on our official Careers page at www.greif.com. All communication from Greif regarding job opportunities will also come from an @greif.com email address. If you have concerns about the legitimacy of a job posting, receive an unsolicited job offer or suspect fraudulent activity, please contact us for verification via this link Contact Us - Greif.
EEO Statement
https://www.greif.com/wp-content/uploads/2023/04/HR-101-Equal-Employment-Opportunity-Policy-English.pdf
We offer a competitive salary, excellent benefits and opportunity for growth. Greif is an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of sex, race, religion, age, national origin, color, disability, veteran status or any other any other legally protected characteristic.
For more information read Greif’s Equal Opportunity Policy.
