JOB SUMMARY AND MISSION

This position contributes to Starbucks success through the development and execution of Application Security Engineering Program practices. You will provide security guidance and conduct security assessments to ensure the technology platforms within the organization are implemented in accordance with established standards and policies.  

Models and acts in accordance with Starbucks guiding principles.

SUMMARY OF KEY RESPONSIBILITIES

Responsibilities and essential job functions include but are not limited to the following: 

• Evangelizes application security program fundamentals, tools, processes and acts as a consultative partner with Global IT and Business teams.
• Performs application security assessments and remediation activities as part of the application security program and ensures application teams adhere to the SDL Framework.
• Guides and performs security activities including vulnerability testing and analysis, code review, static and dynamic code testing, ethical hacking and business logic exploit testing.
• Ensures teams are validating for OWASP top 10, CWE/SANS top 25 and performing industry-leading application security practices
• Enables application vulnerability detection mechanisms for applications in production use

BASIC QUALIFICATIONS

2-4 Years application development experience with 1+ year preferred in application security discipline.

4 year college degree may be substituted for relevant experience.

• Understanding of application security vulnerabilities such as the OWASP Top 10 and application security best practices

• Knowledgeable about web, mobile, and API development practices.

• Development expertise in 2 or more of the following: JavaScript/Node.js, C#, Java, Scala, Objective-C, Swift, Python.

• Experience using common security testing tools and techniques to perform security assessments for web and mobile applications.

• Ability to communicate security issues to technical and non-technical audiences.

PREFERRED QUALIFICATIONS

• Prior experience working in PCI software environments with understanding of PCI practices

• Experience working with cloud platforms such as AWS, Azure, from both a developer and security perspective.

• Certifications such as CEH, CSSLP, CISSP, GIAC (GWAPT, GMOB, etc.).

ADDITIONAL QUALIFICATIONS

• Ability to apply knowledge of multidisciplinary business principles and practices to achieve successful outcomes in cross-functional projects and activities

• Microsoft Word, Excel and PowerPoint

• Ability to work within large collaborative organizations

• Knowledge and ability to apply process improvement principles

• Strong written, verbal and active listening skills

• Models and acts in accordance with Starbucks guiding principles

• Foster effectiveness during changes in tasks, work environment or condition affecting the organization

• Strong analytical and problem-solving skills

• Ability to balance multiple priorities and meet deadlines

Starbucks and its brands are an equal opportunity employer of all qualified individuals. We are committed to creating a diverse and welcoming workplace that includes partners with diverse backgrounds and experiences. We believe that enables us to better meet our mission and values while serving customers throughout our global communities. People of color, women, LGBTQIA+, veterans and persons with disabilities are encouraged to apply. Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal state and local ordinances. Starbucks Corporation is committed to offering reasonable accommodations to job applicants with disabilities. If you need assistance or an accommodation due to a disability, please contact us at 206-318-0660 or via email at applicantaccommodation@starbucks.com

Starbucks is about more than just a coffee; they're dedicated to employee and community growth. Starbucks even runs a program that pays for their baristas tuition to help them finish their education. That’s why when you launch your career inspired by human connection and the opportunity to become your personal best, the possibilities are endless. SCAP - Starbucks College Achievement Program