Software Engineer
San Francisco, CA

Job Description

Job Overview:

A Software Engineer is responsible for collaborating closely with application development teams to guide through security requirements, analyze software designs/architecture/implementations from a security perspective, and serve as a dedicated security resource to identify and assist in proposing solutions to all security matters. The appropriate candidate will have a "hands-on" role working closely with engineering and development teams to solve real problems in ways that meet our security requirements. This will include having deep experience with security and agile programming best practices and applying them within complex applications and systems. Responsibilities include the application and advocation of security for Macy's Software Development Life Cycle (SDLC), integration of tools and processes into CI/CD pipeline and recommending appropriate solutions for keeping Macy's applications secure. The successful candidate will be responsible for using technologies ranging from legacy architectures to web and mobile applications. Openness to embrace new ideas and a willingness to learn and adapt are essential for success in this role. Perform other duties as assigned.

Essential Functions:

* Work as software engineer within an application development area to ensure that security best practices and internal requirements are met through the entire development lifecycle.


* Perform threat modeling, design reviews and code reviews with a focus on security as part of the development lifecycle.


* Integrate state-of-art technology to meet the business needs and interface with business units regarding technical planning and application security topics.


* Provide guidance in the interpretation of Secure Software Development Lifecycle (S-SDLC) as well as governance of security standards with development teams.


* Assist with proof-of-concept and proof-of-technology testing for integrating new 3rd party security products into the development and deployment processes.


* Lead the integration of security engineering automation tools into the CI/CD pipeline.


* Build application security in cloud-based and virtualized environments Perform regular security testing, code review, and assist with remediation of identified issues.


* Consult with development and architecture teams on Secure Development methodologies and best practices, including incident response and architecture, PCI certification and other audit and review processes.


* Advise internal customers and evangelize threat modeling, secure design reviews, static code analysis and vulnerability remediation.


* Applying security controls (PCI-DSS, SOX, HIPAA, ISO) as well as web application security topics such as OWASP Top 10, CWE Top 25, and authentication infrastructure (SAML, OAuth).


* Regular, dependable attendance & punctuality.



Qualifications:

Education/Experience:

* Bachelor's and/or an equivalent combination of education and 2 yrs. experience.


* 4 years of experience in application development in a technical SME and leadership capacity.


* 3 years of experience building and evaluating enterprise application deployments in cloud, on-prem and hybrid scenario.


* 2 years of experience designing systems/applications with high level of complexity (e.g. many interfaces, multiple packages, platforms).


* Demonstrated understanding of core secure coding concepts.


* Familiarity with security testing tools for SAST, DAST, IAST, RASP and Pen Testing a plus.


* Experience working in a continuous delivery or DevOps team is a plus.


* Familiarity with security solutions for data and web services.


* Familiarity with agile development principles sufficient to integrate security controls without unnecessarily impeding overall project velocity.


* Demonstrated software engineering experience in programming languages such as Java, JavaScript, C, C , C#, PHP, Objective C.


* Security certifications are a plus e.g. CISSP, CSSLP, etc.



Communication Skills:

* Demonstrated communications skills with the ability to establish and maintain strong partner relationships.



Mathematical Skills:

* Basic math functions such as addition, subtraction, multiplication, division, and analytical skills.



Reasoning Ability:

* Must be able to work independently with minimal supervision and make sound decisions.



Physical Demands:

* This position involves regular walking, standing, sitting for extended periods of time, hearing, and talking.


* May occasionally involve stooping, kneeling, or crouching.


* May involve close vision, color vision, depth perception, focus adjustment, and viewing computer monitor for extended periods of time.


* Involves manual dexterity for using keyboard, mouse, and other office equipment.


* May involve moving or lifting items under 10 pounds.



Work Hours:

* Ability to work a flexible schedule based on department and company needs.

Company Profile:

As the fastest growing part of Macy's Inc. business, macys.com is achieving record sales and broadening our workforce. Macys.com offers the entrepreneurial culture of a web business with the stability and support of the best brand in retailing. Creativity and ingenuity partner with business acumen and tech savvy to build a unique business poised for substantial growth. If you're interested in being a part of that growth and want to know what it's really like to work at macys.com, get an inside look at http://ecommerce.macysjobs.com/

Our employees have long-term opportunities and are encouraged to utilize their Supervisors and Human Resources for cross-functional movement to further their careers. At macys.com we are committed to giving back to the community by partnering with local charitable organizations. By skillfully combining the power of digital technology and omnichannel integration with the best in retailing, macys.com is reaching new heights.

This job overview is not all inclusive. In addition, Macy's, Inc. reserves the right to amend this job overview at any time. Macy's is an Equal Opportunity Employer, committed to a diverse and inclusive work environment. Macy's, Inc. - including Macy's and Bloomingdale's - will consider for employment qualified applicants with criminal convictions in a manner consistent with SFPC Art. 49 and LA MC ch.XVIII Art. 9.