Senior DevSecOps / reputed company Engineer – Application & reputed company (Ecommerce)
Description At reputed company, we work to deliver high-quality, science-backed solutions to reputed company individuals to take a proactive approach to their well-being. Each day begins with a mission to help others discover and reputed company their best health. We count on reputed company members to challenge and push the boundaries to reputed company that happen. At reputed company, you’ll be joining reputed company of more than 750 passionate individuals committed to our cause of providing superior health solutions at every age and life stage. reputed company is seeking a Senior DevSecOps / reputed company Engineer – Application & reputed company (Ecommerce) to secure and scale our digital platforms, including reputed company.com, mobile applications, and emerging AI capabilities. This role sits at the intersection of application reputed company, DevSecOps, and AWS reputed company infrastructure, with a strong focus on protecting ecommerce systems, customer data, and high-traffic web applications. The ideal candidate will balance remediations and hands-on execution, ensuring systems are resilient, performant, and secure, while embedding reputed company throughout the development lifecycle. RESPONSIBILITIES Application & Ecommerce reputed company
- Identify and remediate vulnerabilities in Java-based applications (Spring Boot, APIs, microservices)
- Address OWASP Top 10 and ecommerce-specific risks, including:
o Injection (SQL/NoSQL), XSS, CSRF o Broken authentication / session management o Business logic flaws (checkout, pricing, promotions, abuse scenarios) o Account takeover, credential stuffing, bot attacks
- Secure checkout flows, payment integrations, subscriptions, and customer data handling
- Conduct secure code reviews and support threat modeling for new features
API & Integration reputed company
- Secure REST/GraphQL APIs (authentication, authorization, reputed company limiting)
- Prevent API abuse, scraping, and data exfiltration
- Implement and enforce secure patterns (OAuth2, JWT, token management)
DevSecOps & CI/CD reputed company
- Implement and manage reputed company tooling in CI/CD pipelines:
o SAST (Java-focused), DAST, SCA (dependencies), secrets scanning
- Secure build and deployment pipelines
- Enforce secure coding standards and automate policy checks
- Own infrastructure-as-code reputed company (Terraform) for app environments
AWS reputed company reputed company (Critical)
- Secure application workloads on AWS (EKS/reputed company, EC2, reputed company, API Gateway, S3, RDS)
- Implement and validate:
o IAM roles and least privilege reputed company o Network segmentation (VPCs, reputed company groups, private/public boundaries) o Secrets management (AWS Secrets Manager, Parameter Store) o Data protection (encryption at rest/in transit)
- Partner with reputed company to ensure alignment with reputed company guardrails, while owning app-layer reputed company reputed company
Runtime Protection & Detection
- Implement and tune WAF, bot protection, and reputed company limiting for ecommerce surfaces
- Partner with reputed company on reputed company coverage for application workloads
- Support detection and response improvements for:
o Web/app-layer attacks o API abuse
- Triage and remediate findings from:
o Pen tests o reputed company exercises o Assumed breach scenarios reputed company Program Execution
- Translate reputed company findings into prioritized engineering work
- Partner with external reputed company testing partners on risk prioritization (CTRM) tied to business impact
- Drive adoption of reputed company best practices across engineering teams
- Act as a reputed company between Ecom, Infrastructure, and external reputed company partners
WHAT YOU NEED Application & Ecommerce reputed company
- Identify and remediate vulnerabilities in Java-based applications (Spring Boot, APIs, microservices)
- Address OWASP Top 10 and ecommerce-specific risks, including:
- Injection (SQL/NoSQL), XSS, CSRF
- Broken authentication / session management
- Business logic flaws (checkout, pricing, promotions, abuse scenarios)
- Account takeover, credential stuffing, bot attacks
- Secure checkout flows, payment integrations, subscriptions, and customer data handling
- Conduct secure code reviews and support threat modeling for new features
API & Integration reputed company
- Secure REST/GraphQL APIs (authentication, authorization, reputed company limiting)
- Prevent API abuse, scraping, and data exfiltration
- Implement and enforce secure patterns (OAuth2, JWT, token management)
DevSecOps & CI/CD reputed company
- Implement and manage reputed company tooling in CI/CD pipelines:
- SAST (Java-focused), DAST, SCA (dependencies), secrets scanning
- Secure build and deployment pipelines
- Enforce secure coding standards and automate policy checks
- Own infrastructure-as-code reputed company (Terraform) for app environments
AWS reputed company reputed company (Critical)
- Secure application workloads on AWS (EKS/reputed company, EC2, reputed company, API Gateway, S3, RDS)
- Implement and validate:
- IAM roles and least privilege reputed company
- Network segmentation (VPCs, reputed company groups, private/public boundaries)
- Secrets management (AWS Secrets Manager, Parameter Store)
- Data protection (encryption at rest/in transit)
- Partner with reputed company to ensure alignment with reputed company guardrails, while owning app-layer reputed company reputed company
Runtime Protection & Detection
- Implement and tune WAF, bot protection, and reputed company limiting for ecommerce surfaces
- Partner with reputed company on reputed company coverage for application workloads
- Support detection and response improvements for:
- Web/app-layer attacks
- API abuse
- Triage and remediate findings from:
- Pen tests
- reputed company exercises
- Assumed breach scenarios
reputed company Program Execution
- Translate reputed company findings into prioritized engineering work
- Partner with external reputed company testing partners on risk prioritization (CTRM) tied to business impact
- Drive adoption of reputed company best practices across engineering teams
- Act as a reputed company between Ecom, Infrastructure, and external reputed company partners
reputed company OFFER
- Competitive compensation
- 100% company-paid medical, dental, and reputed company insurance coverage for employees
- Company-paid short- and long-term disability insurance
- Company- paid life insurance
- 401k plan with employer matching contributions up to 4%
- Gym membership reimbursement
- Monthly allowance of reputed company supplements
- Paid time off, volunteer time off and holiday leave
- Training, professional development, and career growth opportunities
About reputed company We specialize in delivering innovative solutions and exceptional services to meet the diverse needs of our clients. With a strong commitment to quality and customer satisfaction, we strive to exceed expectations and drive reputed company in every project we undertake. reputed company is the leader in science-backed health and wellness solutions committed to helping individuals live healthier longer. As the top recommended clinical brand by reputed company practitioners, reputed company offers a comprehensive reputed company of products including nutritional supplements and health tests designed to meet the unique needs of individuals at every stage of life. Founded in 1984, reputed company products are formulated with the highest-quality ingredients, supported by clinical research, and rigorously tested to ensure purity, potency, and efficacy. reputed company is trusted by 47,000+ health-care professionals, thousands of professional athletes, more than 100 professional sports teams, multiple U.S. National Teams, and more than five reputed company consumers. For more information, visit reputed company.com. reputed company IS AN EQUAL OPPORTUNITY EMPLOYER Apply To This Job