What You'll be Doing: 

• Develop and provide presentations on application security topics to both technical and non-technical audiences. 

• Advise executive leadership on current and evolving threats to enable risk-informed decisions. 

• Mentor members of the information security team on matters of application security. 

• Facilitate third-party penetration tests, triage findings, and create remediation plans with development teams. 

• Provide tailored remediation guidance to software developers to address security findings. 

• Provide architectural and security guidance for third-party platforms and services as they integrate into Meijer environments and/or code.  

• Review the security of third-party/open-source software used by Meijer. 

• Provide risk-based analysis of security posture to drive business decisions. 

• Foster relationships with key business partners to create a culture of security and achieve prioritization of security initiatives. 

• Develop internal security tooling for identifying or remediating security risks. 

• Assist/lead on matters of application security in the event of an incident. 

• This job profile is not meant to be all inclusive of the responsibilities of this position.  May perform other duties as assigned or required. 

What You Bring with You (Qualifications): 

• Bachelor’s degree or above in Computer Science, Information Security, or related field. 

• At least four years of professional experience, with at least two years in a security field and at least one year with direct experience writing code. 

• Familiar with object-oriented programming and have written code in one or more programming languages (e.g. C#, Java, C++). 

• Agile/Scrum, SAFe, or Lean certification preferred. 

• Familiarity with secure coding best practices such as the OWASP Top 10. 

• Knowledge of common application architectures and the relative risks associated with them (e.g. single page apps, client-server, native mobile, microservices). 

• Foundational knowledge of security practices in several applied contexts, e.g. networking, cloud infrastructure, containerization, operations, audit, or governance. 

• Knowledge of relevant technology, tools, databases, and development techniques. 

• Strong focus on team dynamics and interpersonal relationships. 

• Strong sense of task ownership with consistent follow-through. 

• Ability to anticipate risks and devise solutions with limited information or context. 

• Excellent project management, organization, and team collaboration skills. 

• Curiosity to learn. 

• Capable of defining and measuring key performance indicators. 

• Able to work cross-functionally with IT and business partners across all areas of Meijer and vendor partners. 

• Adaptive, flexible, and responsive to challenges. 

• Awareness of how security controls influence both internal stakeholders and Meijer customers. 

• SANS/GIAC, CompTIA, ISC2 (e.g. CISSP) or other applicable industry certifications preferred.