Staff Security Engineer - Appsec - Remote

Discovery is at the heart of everything we do. Wherever you find us around the world, if you can think of a product, you can probably find it in our stores, which include TJ Maxx, Marshalls, HomeGoods, Sierra, Winners, Homesense, and TK Maxx. With variety comes plenty of happy surprises—our environment is ever-changing, and that’s just how we like it. Every day is an opportunity to discover something new about our business, our partnerships and even something exciting about yourself. Ready to Discover Different?

What you’ll do

Staff Engineers in Application Security have the knowledge & experience to design and implement business functionality. Engineers at this level can lead & deliver assigned Epics in their supported area. They use & create DevSecOps best practices to ship high-quality code and continue to push their knowledge.

Staff Engineers on the Application Security Team will embrace and foster "innovation" by working on new things in new ways every day; taking an automation first approach to various tasks and processes. You will research, design, develop and implement appsec services and applications to support vulnerability management workflow and processes.

• Serve as a subject matter expert for Application Security, providing guidance to Engineering and Product teams
• Experience in designing and implementing security requirements into the design phase with OWASP Top 10 and the OWASP API Top 10 standards
• Responsible for adhering to secure coding principles and aid in testing the application against security risk/parameters before release
• Performing security reviews(code/architecture) and threat modeling
• Serve as a subject matter expert for Application Security, providing guidance to Engineering and Product teams
• Responsible for adhering to secure coding principles and aid in testing the application against security risk/parameters before release
• Identify, educate, and remediate vulnerabilities in code using SAST/DAST/SCA

What you'll need

• Ability to Design, code, test, deploy & support working software /technology component, automation.
• Design, build and deploy automation to scale vulnerability discovery
• Experience driving projects with minimal supervision, goal driven individual with good technical, interpersonal, communication, and organizational skills
• Fully Owns Epics with decreasing guidance. Takes initiative through identifying gaps and opportunities
• Leads discussions on design approaches to solving visible, strategic, and complex business problems.

Preferred Qualifications/Experience:

• Experience fully owning epics with decreasing guidance
• Takes initiative through identifying gaps and opportunities
• Experience operating in a Lead Engineer capacity for medium to large initiatives, prioritizing and assigning tasks, providing guidance, and resolving issues.

Join us and Discover Different at TJX, click here to learn more.

Full COVID-19 vaccination, including a booster once eligible, is a condition of employment at TJX, subject to reasonable accommodation where required by law.

Come Discover Different at TJX. From opportunity and teamwork to growth, we think you’ll find that it’s so much more than a job. When you’re a part of our global TJX family, you have the full support of a diverse, close-knit group of people dedicated to finding great deals and fantastic style. Best of all? They have a lot of fun doing it.

We care about our culture, but we also prioritize the tangible stuff (Competitive salaries: check. Solid benefits: check. Plenty of room for advancement: of course). It’s our way of empowering you to make your career here.
We consider all applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, gender identity and expression, marital or military status. We also provide reasonable accommodations to qualified individuals with disabilities in accordance with the Americans with Disabilities Act and applicable state and local law.