Job description

Summary We’re seeking a Cyber Security Engineer with strong expertise in both application security architecture and cybersecurity tooling implementation. This role bridges hands-on technical security work with strategic design — ensuring that applications, services, and platforms are built securely from the ground up while continuously improving the organization’s security stack through automation, integration, and operational excellence. Responsibilities Application Security & Architecture • Partner with development and enterprise architecture teams to design secure application architecture standards and establish and enforce secure coding practices. • Conduct threat modeling, application security reviews, and design-level risk assessments. • Integrate security into the SDLC and CI/CD pipelines, including SAST, DAST, dependency scanning, and secret management. • Develop and maintain standards, patterns, and reusable components for secure microservices, APIs, and cloud-native architectures. • Support modern frameworks (e.g., containerized applications, REST APIs, cloud functions) with tailored security guidance and tooling. Cybersecurity Tooling Implementation & Operations • Implement, integrate, and manage core cyber defense and application security tools (e.g., SIEM, SOAR, vulnerability management, secrets management, application scanning, and cloud security posture tools). • Automate detection, alerting, and response workflows using scripting or orchestration frameworks. • Partner with multiple teams (networking, applications, etc) and Security Operations teams to optimize tool coverage and minimize alert fatigue through effective use cases and tuning. • Develop dashboards and metrics showing coverage, findings, and remediation trends. • Lead continuous improvement initiatives focused on efficiency, reliability, and risk reduction through technology adoption. Requirements Qualifications • Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent hands-on experience). • 3–7 years of experience in security engineering, with emphasis on application security and security tool administration. • Proficiency in one or more programming or scripting languages (Python, Java, or Go). • Hands-on experience with cloud platforms (AWS, Azure, or GCP) and their native security services. • Familiarity with CI/CD security integrations (GitHub Actions, Jenkins, GitLab CI, etc.). • Experience with tools such as Snyk, Palo Alto, Burp Suite, Tenable, Abnormal, Sentinel, Wiz, or Realiaquest. • Strong understanding of OWASP Top 10, software supply chain security, and identity architectures. • Excellent communication and cross-team collaboration skills. • Experience with OT environments, operations and Preferred Certifications • CISSP, CSSLP, or MS Security Certifications • GIAC GWAPT, GCSA, or GDSA Success in This Role You will thrive in this position if you: • Enjoy building security into the architecture rather than enforcing it as an afterthought. • Can balance innovation with practical risk management. • Are comfortable working across development, operations, and governance teams to drive security maturity forward. • Strong understanding of how to build and balance security and compliance • Proficient with Microsoft stack to include Azure, Powershell, and Defender • Proficient in OT security to include operational differences between IT and OT. About Us Chobani is a food maker with a mission of making high-quality and nutritious food accessible to more people, while elevating our communities and making the world a healthier place. In short: making good food for all. In support of this mission, Chobani is a purpose-driven, people-first, food-and-wellness-focused company, and has been since its founding in 2005 by Hamdi Ulukaya, an immigrant to the U.S. The Company manufactures yogurt, oat milk, and creamers – Chobani yogurt is America's No.1 yogurt brand, made with natural ingredients without artificial preservatives. Following the 2023 acquisition of La Colombe, a leading coffee roaster with a shared commitment to quality, craftmanship and impact, the Company began selling cold-pressed espresso and lattes on tap at cafés nationwide, as well as Ready to Drink (RTD) coffee beverages at retail. In 2025, Chobani acquired Daily Harvest, a modern brand offering consumers nutritious, delicious and convenient ready-to-make meals.   Chobani uses food as a force for good in the world – putting humanity first in everything it does. The company's philanthropic efforts prioritize giving back to its communities and beyond. Chobani manufactures its products in New York, Idaho, Michigan and Australia, and its products are available throughout North America and distributed in Australia and other select markets.  For more information, please visit  www.chobani.com or follow us on Facebook, Twitter, Instagram and LinkedIn.  Chobani is an equal opportunity employer. Chobani will not discriminate against any applicant for employment on any basis including, but not limited to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, military and/or veteran status, marital status, predisposing genetic characteristics and genetic information, or any other classification protected by federal, state, and local laws. The salary range for this full-time position is $94,000.00 - $147,950.00, + bonus + equity + benefits. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process. Chobani provides a comprehensive benefits package, including medical, dental, vision coverage, disability insurance, health savings account, flexible spending accounts, and tuition reimbursement. To help save for the future, all employees are eligible for a 401k match of 100% on up to 5% of eligible pay. To support growing families, we provide fertility and childcare assistance, and 12 weeks of parental leave at full pay after six months of continuous employment. In addition, we provide wellness resources which include an employee assistance program, fitness discounts, a wellness reimbursement, on-site gym access (certain locations) and a monthly wellness newsletter to connect you with resources and timely information. We offer various types of paid time of including: 120 hours of paid time off, 11 holidays, and paid volunteer time off.

Requirements

Must-haves

Application Security & Architecture
Partner with development and enterprise architecture teams to design secure application architecture standards and establish and enforce secure coding practices.
Conduct threat modeling, application security reviews, and design-level risk assessments.
Integrate security into the SDLC and CI/CD pipelines, including SAST, DAST, dependency scanning, and secret management.
Develop and maintain standards, patterns, and reusable components for secure microservices, APIs, and cloud-native architectures.
Support modern frameworks (e.g., containerized applications, REST APIs, cloud functions) with tailored security guidance and tooling.
Cybersecurity Tooling Implementation & Operations
Implement, integrate, and manage core cyber defense and application security tools (e.g., SIEM, SOAR, vulnerability management, secrets management, application scanning, and cloud security posture tools).
Automate detection, alerting, and response workflows using scripting or orchestration frameworks.
Partner with multiple teams (networking, applications, etc) and Security Operations teams to optimize tool coverage and minimize alert fatigue through effective use cases and tuning.
Develop dashboards and metrics showing coverage, findings, and remediation trends.
Lead continuous improvement initiatives focused on efficiency, reliability, and risk reduction through technology adoption.
Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent hands-on experience).
3–7 years of experience in security engineering, with emphasis on application security and security tool administration.
Proficiency in one or more programming or scripting languages (Python, Java, or Go).
Hands-on experience with cloud platforms (AWS, Azure, or GCP) and their native security services.
Familiarity with CI/CD security integrations (GitHub Actions, Jenkins, GitLab CI, etc.).
Experience with tools such as Snyk, Palo Alto, Burp Suite, Tenable, Abnormal, Sentinel, Wiz, or Realiaquest.
Strong understanding of OWASP Top 10, software supply chain security, and identity architectures.
Excellent communication and cross-team collaboration skills.
Experience with OT environments, operations and
CISSP, CSSLP, or MS Security Certifications
GIAC GWAPT, GCSA, or GDSA

Nice-to-haves

Preferred Certifications

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

ci/cdrestpythonjavagoawsazuregcp

Platform: successfactors
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Paid Time Off

Parental Leave

Wellness