Application Security Specialist

EnerSys
life insurance, vision insurance, paid time off, paid holidays, 401(k)
United States, Pennsylvania, Pittsburgh
811 Parkway View Drive (Show on map)
May 01, 2025
EnerSys is a global leader in stored energy solutions for industrial applications. We have over thirty manufacturing and assembly plants worldwide servicing over 10,000 customers in more than 100 countries. Worldwide headquarters are located in Reading, PA, USA with regional headquarters in Europe and Asia. We complement our extensive line of Motive Power and Energy Systems with a full range of integrated services and systems. With sales and service locations throughout the world, and over 100 years of battery experience, EnerSys is the power/full solution for stored DC power products. What We're Offering Paid time off plus paid holidays Medical/dental/vision insurance plan Life insurance, short/longterm disability, tuitionreimbursement, flex spending, and employee stock purchase plan 401K plan Culture: We value and strive for excellence in all that we do through innovative technology by creating long lasting relationships with our stakeholders, co-workers, and customers. We continentally strive to foster teamwork, engagement and enhance our employee's skills and competence by providing appropriate training. Compensation Range:$91,600-$115,000 Compensation may vary based on applicant's work experience, education level, skill set, and/or location. Job Purpose The Application Security Specialist will collaborate closely with developers, engineers, and security professionals to ensure our applications are built with security in mind. Primary focus is to identify and mitigate potential vulnerabilities in our applications, infrastructure, and products. This role will serve as a key liaison between security and the development teams. Essential Duties and Responsibilities Act as a liaison between the Information Security team and development teams, ensuring that security considerations are embedded into every stage of the software development and deployment process. Conduct application security assessments, code reviews, and penetration testing to identify vulnerabilities. Define and enforce secure coding standards and best practices. Deploy and manage security tools and technologies that integrate with the DevOps pipeline, such as SAST, DAST, and container security tools. Support threat modeling, risk assessments, and security architecture reviews for applications. Ensure that all security practices meet regulatory and compliance requirements. Develop and deliver cybersecurity training programs for development teams to promote awareness and adherence to best practices. Keep up to date on emerging threats, incorporating threat intelligence into security practices and providing proactive defenses. Monitor and respond to application security threats, incidents and vulnerabilities. Stay up to date on regulatory developments and industry trends. Expected to travel up to 10% each year. Perform other duties as assigned. SUPERVISORY RESPONSIBILITIES: N/A Qualifications QUALIFICATIONS: To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Must have an active passport and be willing to travel internationally. Education and/or Experience A degree in a technical field (Computer Science, Information Systems, or Cybersecurity) is preferred but not required. 5+ years of experience in Information Security, with at least 3 years focused on application security, secure coding, or software development. Strong understanding of OWASP Top 10, SANS 25, and other security best practices. Hands-on experience with application security testing tools (e.g., Burp Suite, Fortify, Checkmarx, Veracode, etc.). Experience with threat modeling, penetration testing, and secure software development practices. Familiarity with cloud security (e.g., AWS, Azure, GCP) and container security (Docker, Kubernetes). Excellent communication and interpersonal skills:Oral, written and listening. Strong analytical and problem-solving abilities. Ability to work independently and collaboratively in a cross-functional environment. Relevant IT certification (e.g., CISSP, CSSLP, OSCP, GWAPT, CEH) other relevant certifications is preferred. Reasoning Ability Problem management / resolution skills; project management skills; generally accepted security principles. Ability to analyze data, resources, and schedules to make decisions that affect a project on a regular basis. TRAVEL REQUIRED: Up to 10% General Job Requirements This position will work in an office setting, expect minimal physical demands. EnerSys provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. EEO/Minority/Female/Vets/Disabled Know Your Rights Know Your Rights (Spanish) EEO is the Law Supplement Pay Transparency Nondiscrimination