Security Engineer III

Partner with US teams to provide security guidance as a subject matter expert around application security and operate YUM! application security services for the brand.

Requirements

• Partner with US teams to provide security guidance as a subject matter expert around application security
• Operate YUM! application security services for the brand
• Align with a risk-based approach, collaborate with third-party engineers, and product owners to identify, prioritize, and remediate vulnerabilities in mobile and web applications across YUM! systems
• Leverage established YUM! security services, review vulnerability scanner reports/results and work with application and/or engineering teams to communicate and address/remediate issues
• Maintain the brand’s application security scan profiles and scan policies as per baseline standards across scanning tools for containers, SAST, DAST, and crowd sourced pen testing
• Conduct awareness campaigns with engineering teams to ensure application development adheres to YUM! Global Technology Risk Management development standards
• Continuously monitor published vulnerabilities for various applications, operating systems, and databases
• Conduct threat modeling exercises to identify potential risks at the design and architecture stages and provide guidance to development teams in secure design and best practices
• Coordinate with incident response teams to contain, remediate, and perform root cause analysis on security incidents affecting applications