Cybersecurity - Standard - Security Engineer Level: Senior

For over 30 years, Cook Systems has partnered with organizations across the country to solve technology challenges and build strong technology teams. As a veteran-owned IT consulting company, we combine decades of industry experience with a continued focus on how technology, AI, and the way people work are evolving.

Our work spans technology consulting, talent development, and AI-enabled solutions. We value people who take ownership, adapt quickly, communicate well, and care about the quality of their work. Whether you’re early in your career or bringing years of experience, you’ll have the opportunity to keep building your skills, contribute to meaningful client work, and grow with a company that continues to evolve with the industry.

Two openings for this job...

Senior Application Security Engineer to provide technical expertise across the Application Security platform portfolio. The AppSec Engineer will support AppSec tooling, policy implementation, vulnerability analysis, false-positive validation, platform escalations, and developer enablement activities.
Required Qualifications:
Deep understanding of Secure SDLC and Application Security practices
Hands-on experience with SAST, SCA, API Security, DAST, Infrastructure-as-Code (IaC), and Mobile Security testing
Experience administering and supporting AppSec platforms and security tooling
Experience conducting vulnerability validation, root-cause analysis, and false-positive assessments
Experience providing secure coding guidance and remediation support to development teams
Familiarity with GitLab, CI/CD pipelines, DevSecOps practices, and automated security controls
Experience leveraging APIs, automation, and AI-assisted workflows to improve security operations
Certifications such as CSSLP, CISSP, GWAPT, GWEB, or equivalent industry-recognized credentials

Position #2: Senior Application Security Engineer - Governance & Enablement
Position #2 Overview:
Senior Application Security Engineer to support Application Security governance, reporting, program coordination, and cross-functional enablement activities. The AppSec Engineer will also help support and maintain operational execution across the AppSec program.
Required Qualifications:
Experience supporting enterprise Application Security or cybersecurity governance programs
Experience developing security metrics, dashboards, key performance indicators, and executive reporting
Familiarity with vulnerability management, software supply chain security, and Secure SDLC governance
Strong understanding of cybersecurity policies, standards, procedures, and regulatory expectations
Experience coordinating across security, engineering, technology, risk, and compliance organizations
Strong written and verbal communication skills with both technical and executive stakeholders
Experience with reporting and workflow platforms such as Power BI, ServiceNow, Jira, or equivalent tools
Experience leveraging automation and AI capabilities to improve reporting, governance, and operational processes
Certifications such as CISSP, CISM, Security+, or equivalent industry-recognized credentials