Job Summary: As a Manager Application Security Engineering, you'll provide leadership and oversight to a team that consults / collaborates with internal business team Partners and external vendors to collect requirements, build, and test specifications, and implement documented innovative technical solutions of security requirements. Responsible for managing a team(s) that may include multiple related departments. Participates with other senior managers to influence short-term strategic plans and objectives. Uses influencing skills to gain buy in and manage valuable and complex working relationships. Makes final decisions on administrative or operational matters and ensures operations effective achievement of objectives. Responsible for resource allocation, prioritization, and financial responsibility. Participates in strategic decision making based on company goals and objectives. Responsible for hiring, firing, and performance / pay reviews.

Location: San Antonio, Austin or Dallas, TX (Hybrid)Key Responsibilities & Essential Functions:

• Directs and controls the activities of a broad functional area through several departments within the function. Has control of planning, staffing, budget attainment, and recommending / implementing changes to methods. A portion of time may be spent performing individual tasks related to the function.

Impact:

• • Decisions have serious impact on overall success or failure on function (Digital). Erroneous decisions or recommendations may cause critical delays or modifications to functional projects or operations causing substantial expenditure of time, human resources, and increased financial costs.
  • Looks beyond existing methodologies to resolve complex issues often cross-functional in nature or with significant impact to the business
  • Influences and implements the vision and strategic plans within a department
  • Works on complex issues where analysis of situations or data requires an in-depth knowledge of the department
  • Participates in development of methods, techniques and evaluation criteria for projects, programs, and people within the function
  • Ensures budgets and schedules meet requirements. Extensive business knowledge with comprehensive understanding of the organization and functional area
  • Interacts daily with direct reports, peer leaders, and senior leaders effectively communicating and presenting results and recommendations within their department

Management:

• • Manages one or multiple work groups or units in several different areas or a large functional unit; leads / manages daily coordination of technical staff and vendors
  • Manages production or services of one or more departments or areas, with a high level of complexity and business impact
  • Hires / maintains staffing / fires/ promotes / demotes / transfers / disciplines approves raises; manages / develops / trains teams to achieve department goals; develops / delegates tasks to complete projects; manages communications with stakeholders
  • Leads / coaches / provides effective feedback; provides day-to-day technical leadership; communicates connection between Partners and impact to operational objectives
  • Recommends changes in alignment with business strategy
  • Provides leadership and expertise; participates in cross-functional initiatives; ensures Partners maintain sufficient technical knowledge; identifies training requirements
  • Assists in developing budgets and goals
  • Ensures goal setting and accomplishments align with H-E-B / Digital objectives, and technology decisions align with H-E-B direction and focus on total cost of ownership, maximization of third-party model, promoting cross-functional skill development of Partners, and customer relationships
  • Identifies opportunities to improve team's leadership and technical skills
  • Ensures automation, infrastructure deployment, maintenance, monitoring, security, and compliance using industry and enterprise best practices

The responsibilities and essential functions outlined above describe the general nature and level of work assigned to this position. This is not an exhaustive list of all duties, responsibilities, and skills required. Duties and responsibilities may be modified at any time based on business needs. Employees may be required to perform other job-related tasks as requested by their supervisor, subject to reasonable accommodations.Qualifications & Key Requirements:

• You have 7+ years of experience working in Security roles
• You have 5+ years of experience leading Application Security teams
• You have experience with Architecture design decisions
• You have an expert understanding of application security principles and best practices
• You are highly proficient with security assessment tools and techniques
• You have an in-depth knowledge of common web application vulnerabilities such as OWASP Top 10
• Nice to have experience with NIST, PCI, or HIPAA
• Constantly staying abreast of latest security threats, tools and innovations on the field

 Knowledge/Skills/Abilities:

• Assists senior management in defining organizational goals and strategic plans.
• Objectives are defined in collaboration with senior management and results assessed from a relatively long-term perspective. Erroneous decisions will have a long-term effect on the company's success.
• Working understanding of log analysis, application performance monitoring, API security, container security, AWS cloud security, Agile and other project management methodologies, PCI DSS, HIPAA, and other industry regulations
• Advanced skills in AWS, Azure, or Google Cloud Platform; Terraform, CloudFormation, Pulumi, or Ansible; Python, Golang, PowerShell, Perl, or Shell script
• Advanced skills in Linux-based and Windows Server operating systems management, secrets management, and vaulting technologies
• Advanced skills using APIs to optimize tasks / achieve automation
• Advanced skills in cloud resources: virtual networking, access controls (security groups, ACLs), service endpoints, application / network load balancing, API gateways, service principals, functions / serverless, storage buckets, containers, block storage, file shares
• Advanced leadership / management skills

Education:

• Bachelor in a relevant field of education or work experience leading successful projects and coaching/mentoring others in functional area.

Licenses/Certifications:

• One more professional security certifications e.g -CISSP, CISA, CEH, GIAC, cloud certifications from AWS, Azure, or GCP

Physical Demands & Working Conditions:

• Function in a fast-paced environment
• Work extended hours; sit for extended periods

The work environment characteristics described here are representative of those a Partner encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.JDSECURITY