{"id":4242287,"url":"https://alion.io/job/paccar-application-security-engineer","title":"Application Security Engineer","company":{"id":1871772,"name":"PACCAR","domain":"paccar.com","url":"https://alion.io/company/paccar","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Renton, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":90000,"max":141000,"currency":"USD","period":"year","gross":null,"usd_annual":141000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Agile","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Burp Suite","optional":false},{"name":"C#","optional":false},{"name":"Checkmarx","optional":false},{"name":"CI/CD","optional":false},{"name":"Fortify","optional":false},{"name":"Git","optional":false},{"name":"GitHub","optional":false},{"name":"JavaScript","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"Python","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"SonarQube","optional":false},{"name":"AWS","optional":true},{"name":"GCP","optional":true},{"name":"Kali Linux","optional":true},{"name":"Linux","optional":true},{"name":"Nmap","optional":true}],"status":"live","first_seen_at":"2026-11-12T02:00:00Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-13T12:23:56Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Company Information\nPACCAR is a Fortune 500 company established in 1905. PACCAR Inc is recognized as a global leader in the commercial vehicle, financial, and customer service fields with internationally recognized brands such as Kenworth, Peterbilt, and DAF trucks. PACCAR is a global technology leader in the design, manufacture and customer support of high-quality light-, medium- and heavy-duty trucks under the Kenworth, Peterbilt and DAF nameplates. PACCAR designs and manufactures advanced diesel engines and also provides customized financial services, information technology and truck parts related to its principal business. Whether you want to design the transportation technology of tomorrow, support the staff functions of a dynamic, international leader, or build our excellent products and services - you can develop the career you desire with PACCAR. Get started!\nDivision Information\nPACCAR’s Information Technology Division (ITD), located in Renton, WA utilizes cutting-edge technology to provide systems development, consulting, voice and data communications services to the entire Corporation, which has high visibility in the technology sector.\nRequisition Summary\nAs an Application Security Engineer, you will be a key member of the Global Security group within the IT Division at PACCAR and will be reporting directly to the Principal Engineer. You will provide security guidance to development teams, including secure code review and scanning, vulnerability assessments, and security testing to help application teams build and deploy secure applications and APIs.\nIn this role, you will support security governance and help ensure adherence to application security controls and risk analysis across the organization's application portfolio throughout the SDLC. This includes internally developed applications, third-party developed applications, commercial off-the-shelf (COTS) solutions, and open-source software.\nYou will utilize a risk-based methodology and \"shift-left\" approach to engage early in the software development lifecycle, working alongside engineering teams to help prevent security defects before they are introduced. You will contribute to a team culture that values openness, teamwork, continuous improvement, learning, commitment, and empathy.\nJob Functions / Responsibilities\nSecurity Assessments & Testing\nPerform source code reviews using manual analysis and Static Application Security Testing (SAST) tools to identify vulnerabilities.\nExecute web security assessments on websites, web applications, web services, and APIs using Dynamic Application Security Testing (DAST) tools.\nReview test results from automated security tools, ensure automated tests complete successfully, and identify and remove false positives from tool reports.\nParticipate in developing and reviewing threat models to proactively identify security risks.\nDeveloper Engagement & Remediation\nEngage with development teams to provide vulnerability remediation support through consultation or hands-on assistance.\nAssist developers with understanding security defects, associated risk, and defining acceptable solutions to fix defects.\nCollaborate with teams to integrate secure coding practices and security tooling into CI/CD pipelines.\nContribute to code reviews and design discussions with a security lens.\nSecurity Governance & Standards\nSupport adherence to application security controls and contribute to risk analysis of applications across the SDLC.\nParticipate in the creation, maintenance, and communication of PACCAR secure coding standards, guidelines, and examples.\nSupport the implementation of secure design principles according to organizational policies, standards, and application security patterns.\nAssist in creating technical security documents including assessment reports and remediation guidance.\nTraining & Culture\nShare application security knowledge with the engineering team through brown bags, secure coding tournaments, and developer outreach activities.\nActively participate in improving security culture and awareness throughout the organization.\nParticipate in security incident response when needed.\nTooling & Automation\nHelp maintain and tune Secure SDLC tools including SAST, DAST, and Software Composition Analysis (SCA) platforms.\nSupport the integration of security tooling and automated security checks within CI/CD pipelines.\nStay current with security technologies, products, and emerging trends relevant to application security.\nQualifications\nBasic Qualifications\nBachelors degree in Computer Science, Information Systems, Software Engineering, Cybersecurity, or a related field.\n5+ years of professional experience in application or software security, including hands-on work in areas such as secure code review, vulnerability assessment, threat analysis, or secure development practices.\nHands-on experience with application security testing tools, including DAST platforms (e.g., Burp Suite, WebInspect, OWASP ZAP) and SAST/SCA tools (e.g., Fortify, Checkmarx, SonarQube).\nProficiency in one or more programming languages: C#, JavaScript, and/or Python.\nStrong working knowledge of web application technologies including HTTP, HTML, CSS, JavaScript.\nExpert-level understanding of the OWASP Top 10 and common web application vulnerabilities and website security concepts such as headers, cookies, CORS, XSS, CSRF.\nFamiliarity with web authentication technologies such as OAuth and/or SAML.\nExperience with Software Development Life Cycle (SDLC) and development methodologies such as Waterfall and Agile.\nExperience with control systems: Git, GitHub, Azure DevOps\nPreferred Experience\nExperience working in a large enterprise environment.\nExperience with penetration testing or security tools (e.g., Kali Linux, Nmap).\nFamiliarity with cloud environments such as Azure, AWS, or GCP.\nCertified Secure Software Lifecycle Professional (CSSLP)\nCertified Information Systems Security Professional (CISSP)\nCompTIA Security+\n\nAdditional Job Board Information\nPACCAR Benefits\nAs a U.S. PACCAR employee, you have a full range of benefit options including:\n401k with up to a 5% company match\nEmployee Stock Purchase Program (ESPP)\nFully funded pension plan that provides monthly benefits after retirement\nComprehensive paid time off - minimum of 10 paid vacation days (additional days are provided with additional seniority/years of service), 12 paid holidays, and sick time\nTuition reimbursement for continued education\nMedical, dental, and vision plans for you and your family\nFlexible spending accounts (FSA) and health savings account (HSA)\nPaid short-and long-term disability programs\nLife and accidental death and dismemberment insurance\nEAP services that include wellness plans, estate planning, financial counseling and more\nPACCAR is an Equal Opportunity Employer/Protected Veteran/Disability. At PACCAR, we value talent and promote growth and development. We carefully consider numerous compensation factors, including your education, training, or experience. Applicants and employees for this position will not be sponsored for work authorization, including, but not limited to H-1B visas, now or in the future. The salary range for this position is $90,000 - $141,000 annually. Additionally, this role is eligible for the full range of benefit options listed above.","description_format":"text","description_chars":7333,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Automotive Manufacturing","Automotive Components"],"lifecycle":[{"event":"open","at":"2026-11-13T12:13:49Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 71 · green card filings: 32","filings_12m":71,"filings_prev_12m":88,"green_card_filings_12m":32,"median_offered_wage_usd":117500,"route":null,"cap_exempt":false,"checked_at":"2026-11-12T07:36:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":1}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":33,"reasons":["conf:15","win:early","comp:brand"],"computed_at":"2026-11-14T04:21:56Z"},"pay":{"stated_usd_annual":141000,"is_top_pay":false},"html_url":"https://alion.io/job/paccar-application-security-engineer","json_url":"https://alion.io/job/paccar-application-security-engineer.json","meta":{"generated_at":"2026-11-14T04:21:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6998,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1871772},"rest":"https://alion.io/mcp/rest/get_company?id=1871772"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpaccar-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpaccar-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpaccar-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/paccar-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpaccar-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4242287}},{"tool":"search_jobs","arguments":{"company":"paccar.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4242287},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}