[Remote] Senior IT Application Security Engineer

Note: The job is a remote job and is open to candidates in USA. Meijer is a family company committed to serving people and communities, and they are seeking a Senior IT Application Security Engineer. This role involves leading application security initiatives, mentoring team members, and ensuring secure coding practices throughout the software development life cycle.ResponsibilitiesDevelop and provide presentations on application security topics to both technical and non-technical audiencesAdvise executive leadership on current and evolving threats to enable risk-informed decisionsMentor members of the information security team on matters of application securityFacilitate third-party penetration tests, triage findings, and create remediation plans with development teamsProvide tailored remediation guidance to software developers to address security findingsProvide architectural and security guidance for third-party platforms and services as they integrate into Meijer environments and/or codeReview the security of third-party/open-source software used by MeijerProvide risk-based analysis of security posture to drive business decisionsFoster relationships with key business partners to create a culture of security and achieve prioritization of security initiativesDevelop internal security tooling for identifying or remediating security risksAssist/lead on matters of application security in the event of an incidentThis job profile is not meant to be all inclusive of the responsibilities of this position. May perform other duties as assigned or requiredSkillsBachelor's degree or above in Computer Science, Information Security, or related fieldAt least four years of professional experience, with at least two years in a security field and at least one year with direct experience writing codeFamiliar with object-oriented programming and have written code in one or more programming languages (e.g. C#, Java, C++)Familiarity with secure coding best practices such as the OWASP Top 10Knowledge of common application architectures and the relative risks associated with them (e.g. single page apps, client-server, native mobile, microservices)Foundational knowledge of security practices in several applied contexts, e.g. networking, cloud infrastructure, containerization, operations, audit, or governanceKnowledge of relevant technology, tools, databases, and development techniquesStrong focus on team dynamics and interpersonal relationshipsStrong sense of task ownership with consistent follow-throughAbility to anticipate risks and devise solutions with limited information or contextExcellent project management, organization, and team collaboration skillsCuriosity to learnCapable of defining and measuring key performance indicatorsAble to work cross-functionally with IT and business partners across all areas of Meijer and vendor partnersAdaptive, flexible, and responsive to challengesAwareness of how security controls influence both internal stakeholders and Meijer customersAgile/Scrum, SAFe, or Lean certification preferredSANS/GIAC, CompTIA, ISC2 (e.g. CISSP) or other applicable industry certifications preferredBenefitsWeekly payTeam member discount401(k) with company contributionsPaid parental leavePaid education assistanceDevelopment programs for advancement and career growthMedical/dental/visionLife insuranceDisability leavePaid time off (PTO)Childcare subsidyFree educationCompany OverviewMeijer is a shopping website for grocery, health, and beauty care. It was founded in 1934, and is headquartered in Grand Rapids, Michigan, USA, with a workforce of 10001+ employees. Its website is https://www.meijer.com/.Company H1B SponsorshipMeijer has a track record of offering H1B sponsorships, with 16 in 2026, 59 in 2025, 45 in 2024, 41 in 2023, 33 in 2022, 29 in 2021, 36 in 2020. Please note that this does not guarantee sponsorship for this specific role.