Sr Application Security Engineer

BJ's Wholesale Club is seeking a Senior Application Security Engineer to safeguard our digital and e-commerce platforms. This hands-on role involves threat modeling, managing security testing tools, and collaborating with development teams to embed security into our software development lifecycle. You'll contribute to maturing our secure SDLC practices in a PCI-regulated retail environment, focusing on technical depth and building developer trust.

• Perform threat modeling and security reviews for applications, APIs, and microservices
• Operate and tune SAST, DAST, SCA, and other application security testing tools
• Implement security controls within CI/CD pipelines and support secure SDLC improvements
• Collaborate with development teams to remediate security defects and promote secure coding
• Support PCI DSS compliance and application security requirements
• Automate security testing tasks and evidence collection