Are you ready to make a difference in the world of wireless security? Then come join the T-Mobile team as a Senior Application Security Engineer.
The Team:
Our Vulnerability Management team - is in the business of trust and reliability. We create, maintain the Scanning Infrastructure & Operations function within the Vulnerability Management organization team comprised of full-time employee individual contributors, managed services, and external partners. The functions include operating and maintaining T-Mobile's vulnerability scanning infrastructure, as well as assisting vulnerability response and remediation tasks with partner and vendor teams.
This position is an individual contributor role reporting to the Manager of Vulnerability Management.
This Position:
The Senior Application Security Engineer will evaluate, implement and operationally maintain systems which keep web applications secure. With your team you'll define robust ways to deploy, operate, and scale security. You will interact with technical teams across the organization to secure global systems that scale to millions of users a day.
You have the ability to lead through conflict, take input from multiple stakeholders and deliver solutions required to address complex security issues.
What you'll do in your role.
Evaluate, integrate, and maintain tools and features within systems that increase the security of our platforms
Run tools to discover vulnerabilities, report and help remediate those vulnerabilities
In-depth knowledge of at least one main programming language, from Java, Python, or GO
Proven experience with tools for SAST, SCA, DAST, etc. (Example vendors: Snyk, Synopsys, Veracode)
Strong experience with build pipelines, ideally Gitlab CI, Jenkins
Experience with mentoring junior engineers
Experience meeting AppSec controls and compliance standards
Participate actively in team meetings and projects
Evaluate new tools and technologies under guidance from the team
Document your work product
Stay up to date with the latest trends in Security and AppSecOps practices
Other tasks as assigned by your management.
Participation in an on-call rotation
The experience you'll bring.
Desired:
5+ years' related industry experience
Knowledge of the software development lifecycle, devops and security practices and the tooling used in developing and deploying secure code (i.e. Gitlab, Jenkins, Snyk, Veracode, etc.)
Familiarity with services and platforms used for deployment Docker, Kubernetes, AWS Services
Familiarity with at least one common programming language (i.e. Java, Python, Golang, etc.)
You communicate clearly, both orally, and in written form
Passionate about security!
*LI-KM3
Bachelors' Degree in Computer Science, Cybersecurity or related field, or equivalent work experience
At least 18 years of age
Legally authorized to work in the United States
High School Diploma or GED
T-Mobile requires all employees in this position to be fully vaccinated for COVID-19 prior to starting work, unless precluded from doing so by applicable law. The CDC currently defines -fully vaccinated- as two weeks after the second dose for Pfizer and Moderna, and two weeks after the single dose of Johnson & Johnson. T-Mobile will require proof of vaccination prior to successful applicant's first day of work, and will consider requests for exemption from this requirement during the offer phase (1) as a reasonable accommodation for medical reasons or sincerely held religious beliefs where the accommodation would not cause T-Mobile undue hardship or pose a direct threat to the health and safety of others, or (2) for other reasons under applicable law.
Position details
Req ID: 193838BR
Department: Engineering
Travel Required: No
