10873 -Senior Cloud Applications Security Engineer - Cyber Defense

Hyundai AutoEver America (HAEA) is the IT powerhouse behind Hyundai Motor Corporation, a Fortune 500 global leader in the automotive industry. We provide cutting-edge IT services and support to top brands including Kia, Genesis, Hyundai Translead, Hyundai Mobis, Hyundai Capital, and Glovis. HAEA offers a global and collaborative environment where you’ll drive innovation, boost operational efficiency, and help shape the future of mobility for the Hyundai Motor Group.

About the role

The Senior Application Security Engineer plays a key role in strengthening application security across the software development lifecycle. This role sits within the Cyber Defense organization and is responsible for defining and documenting Secure SDLC requirements, developing and managing a hardened cloud container image repository, and embedding automated security testing into CI/CD pipelines.

Responsibilities

• Secure SDLC Requirements & Standards
  • Define, document, and maintain Secure SDLC policies, standards, and procedures covering secure design and coding expectations, security testing requirements, and build, release, and deployment security controls.
  • Partner with Engineering, Platform, and AppDev teams to ensure Secure SDLC requirements are practical, scalable, integrated into existing development workflows, and clearly communicated.
  • Support governance activities, including reviews, exceptions, and continuous improvement of SDLC security requirements using standardized Risk Operation processes.
• Container Security & Hardened Images
  • Develop, manage, and maintain a hardened cloud container image repository for application workloads.
  • Define baseline security requirements for container images, including base image selection and hardening, patch and dependency management, and runtime security considerations.
  • Partner with platform and application teams to drive adoption of approved images and patterns.
  • Ensure container images are scanned, updated, and versioned in alignment with security standards.
• CI/CD Security Tooling & Integration
  • Define and implement automated security testing within CI/CD pipelines, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and open-source and dependency vulnerability scanning.
  • Tune tools and rules to balance coverage, accuracy, and developer experience.
  • Ensure security testing is integrated early in the pipeline to enable remediation prior to final build and deployment.
• Vulnerability Management & Remediation
  • Partner with engineering and application teams to ensure findings from SAST, DAST, and open-source scans are incorporated into the Risk Operation function, clearly triaged, prioritized, assigned ownership, and remediated within agreed SLAs and timelines.
  • Track remediation progress and escalate systemic or repeated issues.
  • Validate remediation and support secure release decisions.
• Collaboration & Enablement
  • Act as a trusted security partner to development and other relevant teams, providing guidance on secure coding practices, vulnerability remediation, and threat patterns.
  • Support application security reviews, threat modeling, and design discussions as needed.
  • Contribute to continuous improvement of application security tooling, processes, and metrics.

Requirements

• Experience: 5+ years in Application Security, Product Security, or Secure Software Engineering with hands-on experience defining and implementing Secure SDLC requirements and integrating SAST, DAST, and open-source vulnerability scanning into CI/CD pipelines.
• Education: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent work experience).
• Technical Expertise:
  • Practical experience securing containerized applications and managing hardened container images.
  • Strong understanding of common application vulnerabilities (e.g., OWASP Top 10), modern CI/CD workflows, DevOps practices, and secure coding and build processes.
  • Strong troubleshooting and collaboration skills.
• Language & Communication: Excellent stakeholder management and communication skills. Proficient in English for effective communication and coordination.

Preferred Qualifications

• Hands-on experience with industry-leading Application Security tools for SAST, DAST, and open-source scanning.
• Experience with container platforms and registries (e.g., Docker, Kubernetes) and working in cloud-native application environments.
• Working knowledge of application threat modeling techniques.
• Master’s degree or higher in Cybersecurity, Information Technology, Computer Science, or a related discipline (or equivalent work experience).
• Industry-recognized credentials such as CISSP, CISM, or Application Security-specific certifications (CSSLP, GWAPT, etc.).

Team Culture

The team fosters a high-performance, collaborative environment centered around proactive technology risk management and excellent customer service. Members are expected to lead with accountability, communicate effectively across functions, and adapt to dynamic challenges. The culture values technical excellence, continuous improvement, and global coordination, ensuring technology risks are well managed.

Pay

Base Salary Range: $103,170 - $158,873