Senior IT Applications Security Engineer Job at Swire Coca Cola USA in Draper

Who is Swire Coca-Cola? We are a family-owned bottling company with a story spanning over two centuries. We are one of the largest bottlers of Coca-Cola in North America and distribute more than 50 beverage brands and flavors creating joy for our customers every day. Our 8,000+ driven employees work hard as part of a team that delivers refreshment to over 30 million consumers across 13 states. Begin a journey with us at Swire Coca-Cola and belong to a community of dedicated team members who think big and believe in winning together.

Why you'll love working at Swire Coca-Cola:

Swire Coca-Cola is committed to providing balance to support you in all aspects of your life, both at work and beyond. We offer the benefits you need for physical, financial, and emotional well-being.

• Health coverage (3 medical options, dental and vision). 401(k) Retirement Plan w/company match
• Health Savings Accounts w/company match
• FREE virtual primary care, acute care and physical therapy
• FREE Employee Assistance Program
• Company paid (vacation, holidays, sick time, bereavement, jury duty, maternity/parental, disability leave and volunteer time)
• Discounted & free product
• Tuition reimbursement
• Opportunities for career advancement

In addition to health benefits, Swire Coca-Cola is proud to offer you opportunities where you help give back directly to the communities and causes you care about. Note: Enrollment in a Swire Medical Plan is required for some benefits.

What does the Senior IT Security Application Engineer do at Swire Coca-Cola?
Swire Coca-Cola has an opportunity for a Senior IT Security Application Engineer this dynamic hybrid role will be the core of our governance, risk, and compliance architecture. You will blend your expertise in Application Security and Data Engineering to ensure secure coding practices and robust security controls are embedded across all software development. Supporting data engineering initiatives, you'll safeguard data pipelines and storage solutions to meet the highest standards of security, compliance, and resilience. Using Agile/Scrum processes you will partner with business stakeholders, product owners, data governance, and IT teams, to deliver modern, secure solutions while taking on responsibilities such as threat modeling, code reviews, vulnerability management, secure architecture design, and incident response. Your work will help foster a security-first culture through training, documentation, and collaboration supported by data that identifies risk and drives security improvements.

Responsibilities:

• Develop, review, and maintain application features with a focus on secure coding standards, best practices, and conducting threat modeling and security assessments for new and existing applications
• Collaborate with developers (DevOps Team) to remediate vulnerabilities identified through code reviews, automated scans, and penetration testing
• Integrate security tools and processes into CI/CD pipelines (e.g., SAST, DAST, dependency scanning)
• Ensure applications comply with Swire's security policies, regulatory requirements, and industry standards (e.g., OWASP, NIST)
• Design, implement, and maintain secure data pipelines, databases, and APIs ensuring data integrity, confidentiality, and availability across cloud and hybrid environments
• Support data governance and compliance initiatives (e.g., GDPR, CCPA).
• Automate security testing and monitoring within Azure DevOps and related platforms
• Promote secure coding practices through training, documentation, and mentorship and stay current on emerging threats, vulnerabilities, and security technologies.
• Work with cross-functional teams to prioritize and resolve security issues communicate project status, risks, and recommendations to stakeholders and senior management.

Requirements:

• Bachelor's Degree Computer Science, Cyber Security, Engineering, or related field required
• 5+ years' experience in application development with a strong emphasis on security (Microsoft Stack preferred) required
• 2+ years' experience in data engineering, including secure data pipeline design and cloud data platforms (Azure Cosmos, SQL Server, Snowflake) required
• Hands-on experience with secure coding in C#, ASP.NET, Blazor, React, Angular, HTML5, CSS, SQL, and Web APIs required
• Experience with Azure services (App Services, KeyVault, Docker, Container Registries, Configuration, ADO, Application Insights, Monitoring) required
• Familiarity with security frameworks and standards (OWASP, NIST, CIS) required
• Experience with automated security testing tools (SAST, DAST, dependency scanning) required
• 2+ years' experience in data engineering, including secure data pipeline design and cloud data platforms (Azure Cosmos, SQL Server, Snowflake) required
• Certifications (recommended): CISSP, GIAC, CEH, Security+, ISACA, CREST, and/or other vendor-specific certifications preferred

#LI-AI1 #INDEED-DNI

Come and join our Sparkling team!

Swire Coca-Cola is an equal employment opportunity and affirmative action employer that participates in the E-Verify program as required by law. All qualified applicants will receive consideration for employment without regard race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status or other legally protected characteristics. Swire Coca-Cola does not sponsor applicants for work visas.