Greif is a global leader in performance packaging located in 40 countries. The company delivers trusted, innovative, and tailored solutions that support some of the world's most in demand and fastest-growing industries.
With a commitment to legendary customer service, operational excellence, and global sustainability, Greif packages life's essentials - and creates lasting value for its colleagues, customers, and other stakeholders.
Learn more about the company's Customized Polymer , Sustainable Fiber , Durable Metal , and Integrated Solutions at www.greif.com and follow Greif on Instagram and LinkedIn.
OUR VISION:
To Be the Advantage That Helps Our Customers Win.
OUR PURPOSE:
Creating packaging solutions for life’s essentials.
Job Requisition #:
035984 Application Security Engineer - Expert (Open)
Job Description:
We are looking for an Experienced Application Security Engineer who Designs and implements security controls to protect the organization's applications, APIs, and computer networks from cyber attacks. Develops organization-wide best practices for application and IT security, embedding security requirements into the software development lifecycle. Conducts application security testing, reviews code and architecture for security defects, monitors applications and networks for security issues, and documents all security issues and breaches that are reported.
Key Responsibilitie s
Oversees the implementation, monitoring, evaluation, and maintenance of application and IT security systems, policies, and procedures to safeguard the confidentiality, integrity, and availability of the organization's information, systems, and processes.
Embeds security into the software development lifecycle , defining requirements for secure design, threat modeling, code review, dependency and supply chain management, and pre-release security validation.
Determines and establishes methodologies for conducting application security testing, vulnerability assessments, and compliance audits, including static analysis, dynamic analysis, software composition analysis, and manual review.
Leads the evaluation and testing of applications, APIs, third-party integrations, hardware, firmware, and software for possible impact on system security.
Partners with development and platform teams to triage, prioritize, and drive remediation of application vulnerabilities, establishing severity criteria and remediation timelines.
Selects, implements, and operates application security tooling , integrating automated testing into CI/CD pipelines and build processes.
Provides consultation to resolve security incidents such as intrusion, fraud, attacks, leaks, or application-layer compromise. Recommends actions to halt future incidents and improve security.
Optimizes the organization's application and IT security plans, controls, processes, and procedures and ensures alignment with global standards, regulations, and privacy laws.
Proactively researches trends , methods, and techniques in application and IT security. Applies and understands security standards and best practice frameworks — such as the OWASP Top 10, NIST SSDF, and ISO/IEC — to mitigate risk.
Uses expert knowledge of application and IT security principles and practices to educate and advise development teams, business stakeholders, and leadership, championing security objectives and benefits.
Develops procedures related to incident response, including criteria specific to application security events, and oversees analytics and metrics reporting.
Education and Experience
Typically possesses Bachelor's degree (or equivalent) and 8-12 years of experience, including substantial hands-on experience in application security.
Knowledge and Skills
Excellent organization skills and attention to detail.
Strong analytical and problem-solving skills.
Thorough understanding of application and IT security and their strategic implications to the organization.
Working knowledge of secure development practices, common…