Senior Application Security Engineer - Containers

ADP is hiring a Senior Application Security Engineer - Containers for a hybrid role based in Roseland, NJ (or Alpharetta, GA). The position focuses on container security scanning services, governance for secure container image use prior to production release, and early integration of security controls across the product lifecycle.

Responsibilities

• Lead container security operations, including supply chain risk initiatives across ADP business units.
• Build security into DevOps pipelines and help standardize container image security scanning aligned with shift-left practices.
• Support management of supply chain vulnerabilities, image provenance, adversarial container security, and governance risk and compliance (GRC).
• Contribute to solutions that support generation of a Container Security Bill of Materials (CSBom) and Vulnerability Exchange (VEX).
• Help establish secure container development practices through training, governance, and metrics.
• Stay current on container cybersecurity threats and best practices to enable scalable container hardening.
• Customize security policies, rules, and alerts to match established settings.
• Serve as a technical SME to drive program excellence.
• Identify meaningful KPIs/KRIs to measure progress and continuous improvement.
• Provide weekly scanning and monitoring reports.
• Create and maintain Standard Operating Procedures (SOPs).
• Perform other duties as required.

Requirements

• Basic knowledge and understanding of container security vulnerabilities (including OWASP).
• Understanding of container image formats such as Docker and OCI.
• Experience implementing and rolling out container scanning solutions as part of container development.
• Familiarity with internet technologies and secure coding best practices for web development.
• Understanding of CI/CD pipelines across tools such as Bitbucket, Jenkins, Rally, JIRA, Artifactory, Nexus, SonarQube, git, and Snyk.
• Previous software engineering or architecture experience (Java, C#, .Net, JavaScript, Python) preferred.
• Strong analytical and problem-solving skills with basic cross-functional knowledge across development and security disciplines.
• Experience training development teams on secure container practices.
• Basic understanding of Test Automation tools and frameworks, including the NIST Container Security Framework.
• Ability to communicate security concepts to technical and non-technical audiences.
• Understanding of Agile methodologies, Cloud, Container and Application Security.
• Good problem-solving, communication, and presentation skills.
• Ability to work effectively as part of a remote team.
• Self-motivated with a positive attitude.
• Bachelor’s degree or equivalent.
• Five years or more experience in IT or cybersecurity roles, with three or more years specifically in software engineering roles.
• Basic knowledge and understanding of container security risks and related concepts.
• Familiarity with microservices architecture and design patterns.
• Ability to analyze qualitative and quantitative data to support risk-based, data-driven decision-making.
• Plus (not required): CEH, CISSP, CSSLP, GCIA, GPEN, GWAPT.

Technologies

• Docker, OCI, OWASP
• DevOps, CI/CD
• Bitbucket, Jenkins, Rally, JIRA, Artifactory, Nexus, SonarQube, git, Snyk
• Java, C#, .Net, JavaScript, Python
• NIST Container Security Framework
• CSBom, VEX
• Agile, Cloud, Container and Application Security
• Microservices architecture

Location and Salary

Location: Roseland, NJ (hybrid). Role includes ADP locations in Roseland, NJ or Alpharetta, GA.

Salary: USD 74,800 to 183,900 per year.

Benefits

• Medical, Dental, Vision
• Life Insurance
• Matched Retirement Savings
• Wellness Program
• Short-and Long-Term Disability
• Charitable Contribution Match
• Holidays
• Personal Days & Vacation
• Paid Volunteer Time Off