Senior Application Security Engineer

About the Role
The Sr. Application Security Engineer will be responsible for partnering with engineering and operations teams to support the organization's long-term security strategy. They will apply hands-on technical skills, critical thinking, and strong leadership abilities to design and implement effective security solutions to reduce risk in the Mastery environment.
The Sr. Application Security Engineer must be comfortable communicating with team members and cross-functional partners, working with multiple security technologies, prioritizing security risks, and driving technology and process implementations/improvements to secure systems, data, and the Mastery user community.
This role requires a strong background in security as it relates to platform infrastructure, application security, endpoints, and other aspects of network/cloud infrastructure security.
Responsibilities:

• Design, implement, and operate a highly automated and scalable vulnerability management program leveraging multiple technologies.
• Provide technical guidance on vulnerability remediation and secure configuration in alignment with security best practices, policies/standards, and compliance requirements.
• Monitor threat and vulnerability data sources for emergent risks.
• Work with vendors to design and configure security tools and diagnose and troubleshoot problems.
• Identify opportunities to improve processes and technologies to reduce risk and be a change agent to address these gaps.
• Work directly with the compliance team to implement policies and controls that align with industry standard frameworks.
• Create standards, requirements, design documents, run books, processes, and procedures.
• Plan and execute sprint-based initiatives to achieve annual roadmap goals.
• Produce key metrics for the vulnerability management program.
• Perform consistently at or above outlined expectations and deliver on-time, quality work.
• Mentor junior staff members.
• Foster a culture of security by developing and facilitating security awareness training.
• Communicate complex security and technical topics in easy-to-understand language to a variety of audiences.
• Build consensus for delivering results while finding common ground for collaboration and partnership within security team and cross-functionally.
• Perform additional projects as assigned by leadership.

Qualifications:
Education/Certifications

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or Information Technology preferred

• CISA, CISM, CISSP, or GIAC certifications a plus

Professional Experience

• 5+ years Information Security, IT Audit, or related field
• Prior experience in one or more technical discipline (vulnerability management, application security, cloud, infrastructure, networking)

Preferred Knowledge/Skills

• Microsoft Azure cloud computing experience
• Azure Kubernetes experience
• GitHub administration (CI/CD pipeline security, repo management, actions/workflows, branch protection rules, Dependabot, Renovate, etc.)
• Experience with security scanning tools (Microsoft Defender, Trivy, SonarQube, Invicti, ManageEngine Endpoint Central, etc.)
• Understanding of basic networking, hosting, containerization technologies, and API security
• Programming/scripting languages (Python, Powershell, etc.)
• Demonstrated experience in PowerBI, Jira, Confluence
• Understanding of IT audit and compliance standards such as SOC 1, SOC 2, SOx, ISO 27001, etc.

About Mastery
Mastery Logistics Systems is building the world's first lovable Transportation Management System, or TMS.
Our customers - large transportation companies and shippers who need those companies - have struggled with systems that are outdated or inadequate. As shippers or transportation service providers, our customers have in the past been forced to use multiple systems to manage dedicated fleet operations, outsourced or insourced trans management, one way trucking, truckload brokerage, LTL, and Intermodal, or to sub-optimize one or more of those functions by attempting to fit it into a TMS that is adequate at another function.
Mastermind TMS allows our customers to bring all of these functions into a single platform, providing flexibility, visibility, control, and efficiency. Today's unprecedented global supply chain upheavals underscore how important the transportation industry is. We are building a system to allow this industry to work faster, smarter and more efficiently.
The challenges in this industry are big and exciting! We are tackling everything from fast and efficient data input to ingesting large amounts of data and applying AI to looking at blockchain to securely digitize paperwork. If you are passionate about humanizing an industry, automating in innovative ways, building for quality and scale, helping make people's lives easier and touching every part of our economy then this is the place for you.
Mastery Logistics Systems is committed to continuing to build an incredible company. We are a masterful mosaic of incredible people. We are specialists and experienced in our respective fields. We are dedicated to continuous improvement both professionally and personally. We are a collective group of really good people. We have different interests, backgrounds & talents and we work together to create really cool stuff! We believe in diversity of thought and are mindful and inclusive. We have deep respect for each other and work diligently at adding the right people to our teams.
We have flexible schedules but share in the mission that we are building and need to get it done. We offer an excellent suite of benefits.
Our team has the domain knowledge and connections to make an impact, and we're looking for experienced and thoughtful people to who thrive on creating and building great products. We want people who have a true passion for servicing and taking care of our customers. We need people who are flexible problem solvers, thrive on collaboration and consistently know how to communicate their solutions well. We are small and nimble - which is evident in how quickly we could pivot to our new reality. Each member of the team can make a tremendous impact both technically and culturally. While a start-up, we are well-funded, have an initial paying customer with which to test and launch, and are founded by top experts and veterans in the logistics industry.
Join us - you'll love it - let's build a masterpiece!
Benefits
Mastery takes great pride in providing our employees a robust and highly competitive benefit package. Our benefits include Medical, Dental and Vision insurance, company paid Life insurance for 1x salary, Legal, AD&D, Additional Life and other employee assistance benefits. We have a 401k savings plan with a 4% match. We provide opportunities for professional growth and development. We have a manage your life and schedule Paid Time Off program. We are fully devoted to finding creative perks and benefits since we cannot currently enjoy our cool office culture. Our philanthropic partner is St. Jude Children's Research Hospital.
We are an equal opportunity employer and actively seek a diverse community of professionals.