Engineer II, Cybersecurity , Application Security

What You Will Do – Essential Responsibilities

• Implement, develop, operate, and improve Cybersecurity solutions utilized for to progress Application Security at CarMax including static and dynamic analysis, API Sec, and Container Sec.
• Provide functional and technical expertise on projects that have application security implications for our Company.
• Learn and understand the full portfolio of Cybersecurity capabilities at CarMax and how they work together to secure or enterprise.
• Independently drive tasks and projects to successful completion through effective time and schedule management, customer interaction, and cross functional team interaction
• Effectively triage support problems and respond with the appropriate level of urgency
• Participate in a 24x7 on-call weekly rotation as scheduled, and the ability to perform after hours support as needed. Current rotation is about 3 weeks per year.

Qualification Requirements

• Strong fundamentals in general Cybersecurity concepts with an interest in learning more about and contributing to Application Security
• Functional understanding with at least one coding or scripting language: e.g. PowerShell, Python, .Net, Javascript, C#
• Excellent analytical, troubleshooting, and problem-solving skills and performs well in high pressure or stressful situations
• Excellent organization and time management skills
• Excellent communication skills to include, but not limited to, verbal and written communication; delivering organized presentations; able to tailor message to the audience; and facilitate group discussions with diplomacy and seek diverse opinions
• Ability to effectively estimate the efforts of others and the impact required to accomplish requested tasks/projects

Preferred Qualifications

• Functional proficiency with at least one coding or scripting language
• Experience performing dynamic application security testing (DAST) using open source and commercial tools.
• Experience performing static security code analysis (SAST) and providing relevant recommendations to stakeholders.
• Experience integrating security into the container lifecycle, including image assurance, Kubernetes posture management, secrets management, and runtime threat detection

Education And/or Experience

• Bachelor’s Degree in Computer Science, Engineering, Cybersecurity, or a related field, or equivalent alternative education, skills, and/or practical experience is required.
• 2+ years of work experience required in Cybersecurity or other areas directly relevant to cybersecurity responsibilities and tasks.
• Knowledge of developer tools like GitHub, Azure DevOps, and TeamCity.
• Experience with Public Cloud: e.g. Azure, AWS, GCP.
• Understanding of development and product teams and DevSecOps best practices.
• CISSP certification preferred but not required.

Work Location and Arrangement

This role will be based out of the CarMax Home Office at West Creek (Richmond, VA) and associates will work onsite 4 days per week.

Pay

The Annual Salary For This Position Is $80,600.00 - $120,900.00. May be eligible for bonus and equity.

Benefits

Except as otherwise required by state law, CarMax Associates are entitled to the following paid sick, vacation, and holiday time. Associates That Are Considered Full-time Hourly Or Commission/incentive Eligible: To earn up to 48 hours of sick time per year accrued on a per pay period basis and between 80 hours and 200 hours per year of vacation time after a 90 day waiting period depending on years of continuous service with the Company. For 8 hours of pay for each of a total of 6 paid scheduled holidays per year plus 1 floating holiday. If such an Associate does work on a scheduled holiday due to business need, they are eligible for Holiday Premium Pay. Associates considered full-time salaried are entitled to paid time away with no specified limit as needed for sick, vacation, bereavement, jury duty, holidays, floating holiday, etc. subject to manager approval. For more details about benefits, please visit our CarMax Benefits website.

This response is AI-generated, for reference only.