Engineer II, Cybersecurity, Application Security

Carmax

Confirmed live today High trust

Hybrid

Quick summary

Work type: Hybrid
Location: Richmond, VA
Salary: $80,600–$120,900 / yr
Posted: 42 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $161k

This role $101k

$66k most similar roles pay here $217k

This role pays less than 98% of similar roles. Most pay $137,500–$184,600 — the shaded band above. At the midpoint, this role pays about $101k versus about $161k for comparable roles.

Based on 240 similar postings.

Employer

About Carmax

CarMax is the largest used car retailer in the United States, offering a customer-friendly, no-haggle buying experience with a broad selection of quality used vehicles, financing, and vehicle protection plans. Industry: Automotive Retail

Carmax currently has 28 open roles on FindRole.

Listed pay typically runs $98,600–$150,850 across 28 roles with salary data.

Most-posted roles

View all roles at Carmax

At a glance

TL;DR · Engineer II, Cybersecurity, Application Security

Role Posting Log in to save

Engineer II, Cybersecurity - Application Security joins the Application Security Program team to enhance security capabilities and support product innovation. This role involves implementing, developing, and operating cybersecurity solutions focused on static and dynamic analysis, API security, and container security. The successful candidate will provide technical expertise on projects with application security implications, triage support problems, and manage cross-functional tasks. Required skills include proficiency in at least one coding or scripting language such as PowerShell, Python, .Net, Javascript, or C#. The role involves working with tools like GitHub, Azure DevOps, and TeamCity while utilizing public cloud platforms including Azure, AWS, and GCP. Candidates should possess knowledge of DevSecOps best practices to address security posture improvements. Experience with DAST, SAST, and container lifecycle integration is preferred to solve complex security challenges within the enterprise environment.

What does a Engineer earn?

Median $185000 from 263 postings across 56 companies.

See salary data

Skills

Application Security SAST DAST Kubernetes DevSecOps Python PowerShell .Net JavaScript C# Azure AWS GCP GitHub Azure DevOps TeamCity

What you'll do

Implement, develop, and improve security solutions for static analysis, dynamic analysis, API security, and container security.
Provide technical expertise on projects with significant application security implications for the company.
Manage and execute tasks independently while maintaining project schedules and coordinating with cross-functional teams.
Triage support problems and respond to issues based on the required level of urgency.
Participate in a 24/7 on-call rotation to provide after-hours technical support as needed.
Integrate security into the container lifecycle, including image assurance and Kubernetes posture management.

What we're looking for

Bachelor's degree in Computer Science, Engineering, Cybersecurity, or a related field, or equivalent experience.
Must be authorized to work in the United States on a full-time basis.
At least 2 years of work experience in cybersecurity or other directly relevant areas.
Functional understanding of at least one coding or scripting language such as PowerShell, Python, .Net, Javascript, or C#.
Knowledge of developer tools like GitHub, Azure DevOps, and TeamCity.
Experience with public cloud platforms including Azure, AWS, or GCP.
Understanding of development/product teams and DevSecOps best practices.
CISSP certification (preferred); experience with DAST, SAST, or container security (preferred).

Similar roles

Application Security Engineer

State Street

Quincy, MA +4 18 days ago $120,000–$202,500

AppSec DevSecOps SAST DAST SCA CI/CD Python Java .Net Node.js AWS Azure Kubernetes Terraform Ansible Infrastructure as Code Agile SDLC API Security Container Scanning

6+ yrs exp

Save

Security Engineer, Application

Genworth Financial

Richmond, VA +1 2 days ago $77,800–$117,000

Application Security DevSecOps AWS Azure GCP Infrastructure as Code Policy as Code CI/CD Python Java .NET C# PowerShell Bash Ruby PHP JavaScript HTML SOC2 ISO 27001 NIST 800-53 HIPAA PCI Threat Modeling Vulnerability Scanning

3+ yrs exp Hybrid

Save

Application Security Engineer

State Street

Quincy, MA 49 days ago $100,000–$167,500

AppSec DevSecOps SAST SCA DAST CI/CD Python Java .Net Node.js AWS Azure Kubernetes Terraform Ansible Infrastructure as Code Agile SDLC Container Security

6+ yrs exp

Save

Application Security Engineer

State Street

Quincy, MA +3 49 days ago $120,000–$202,500

AppSec ADR DevSecOps SAST DAST SCA RASP WAAP API Security OWASP Top 10 Java Python .NET Node.js AWS Azure Ansible Terraform Kubernetes CI/CD Infrastructure as Code

6+ yrs exp

Save

IT Security Engineer II

Endeavor Health

Skokie, IL +2 65 days ago

Azure SIEM SOAR EDR XDR DLP IDS IPS CNAPP CSPM HIPAA PCI NIST Vulnerability Management Identity Security System Hardening Cloud Security Security Orchestration Automation

3+ yrs exp Hybrid

Save

IT Security Engineer II

Endeavor Health

Skokie, IL +2 8 days ago

SIEM EDR XDR SOAR IDS IPS DLP CSPM CNAPP HIPAA PCI NIST Vulnerability Management System Hardening Identity Security Cloud Security Incident Response

3+ yrs exp Hybrid

Save