{"id":1316171,"url":"https://alion.io/job/rxo-lead-engineer-information-security-application-security","title":"Lead Engineer, Information Security (Application Security)","company":{"id":2176442,"name":"RXO","domain":"rxo.com","url":"https://alion.io/company/rxo-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":51,"ghost_share":0,"stale_share":0.863,"repost_share":0,"time_to_fill_p50_days":34,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":81000,"max_usd":168000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":373},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Akamai","optional":false},{"name":"Ansible","optional":false},{"name":"Azure","optional":false},{"name":"Bicep","optional":false},{"name":"CI/CD","optional":false},{"name":"CWE","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false}],"status":"closed","first_seen_at":"2026-09-16T00:00:00Z","employer_posted_date":"2026-09-16","last_verified_at":"2026-10-19T09:24:40Z","board_verified":false,"closed_at":"2026-10-19T09:24:40Z","days_open":33,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":33},"description":"Accelerate your career at RXO\nRXO is a leading provider of transportation solutions. With cutting-edge technology at the center, we're revolutionizing the industry with our massive network and commitment to finding solutions for every challenge. We create more efficient ways for shippers and carriers to transport goods across North America.\nAt RXO, we're looking for a Lead Engineer, Application Security to help strengthen and scale our application security program across a multi-cloud environment. In this role, you'll serve as a senior individual contributor responsible for driving secure application architecture, integrating security into the software development lifecycle, and partnering closely with engineering teams to identify and remediate security risks. You'll play a key role in securing modern cloud-native applications, supporting AI initiatives, and advancing our overall security posture.\nThispositionisbasedoutofRXOheadquarterslocatedat11215NCommunityHouseRoad,Charlotte,NC28277andfollowsafour-dayonsiteworkscheduleMondaythroughThursday,withremoteworkonFridays.\nWhat your day-to-day will look like:\nLead the development and governance of application security standards, secure architecture principles, and threat modeling practices across the enterprise.\n\nConduct security assessments and threat modeling for emerging technologies, including Agentic AI solutions, Large Language Models (LLMs), and autonomous AI workflows.\n\nAnalyze and tune Web Application Firewall (WAF) configurations, including reviewing F5 and Akamai logs, investigating anomalies, and implementing approved rule exceptions.\n\nIntegrate and optimize automated security tools, including SAST, DAST, and Software Composition Analysis (SCA), within CI/CD pipelines and DevSecOps processes.\n\nPartner with software engineering teams to identify vulnerabilities and provide code-level remediation guidance aligned with secure coding best practices.\n\nLead and support security awareness initiatives, including mentoring developers and facilitating Security Champion programs across engineering teams.\n\nPerform application security reviews and contribute to risk identification, vulnerability management, remediation tracking, and reporting efforts.\n\nEvaluate cloud-native applications and services across Azure, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI) environments to ensure adherence to security standards.\n\nSupport the implementation of security controls within development pipelines, including mechanisms to prevent deployments with unresolved critical or high-risk vulnerabilities.\n\nDrive continuous improvement initiatives to enhance application security processes, tooling, and developer enablement.\n\nAt a minimum, you'll need:\nBachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field, or equivalent combination of education and experience.\n\n3+ years of experience in Application Security, Security Engineering, DevSecOps, or a related cybersecurity discipline.\n\nExperience identifying and remediating security vulnerabilities within application code and software development environments.\n\nExperience working with enterprise WAF platforms such as Akamai App & API Protector, F5 Advanced WAF, or similar technologies.\n\nExperience securing cloud-native workloads and applications within Azure, GCP, and/or OCI environments.\n\nExperience with container technologies, including Docker and Kubernetes.\n\nExperience integrating security tools into CI/CD pipelines and development workflows.\n\nKnowledge of OWASP Top 10, Common Weakness Enumeration (CWE), secure API design principles, and application security best practices.\n\nStrong analytical, problem-solving, and communication skills with the ability to collaborate across technical teams.\n\nIt'd be great if you also have:\nExperience securing AI-enabled applications, LLM-based solutions, or autonomous agent workflows.\n\nExperience reviewing and securing Infrastructure as Code (IaC) technologies such as Terraform, Ansible, or Bicep.\n\nMicrosoft Certified: Azure Security Engineer Associate, GCP Professional Cloud Security Engineer, CISSP, CSSLP, CASE, GWEB, or related security certifications.\n\nExperience with Akamai and/or F5 security platforms in large-scale enterprise environments.\n\nExperience leading Security Champion programs or mentoring engineering teams on secure development practices.\n\nAbility to influence cross-functional teams and drive security improvements through collaboration and technical expertise.\n\nExperience developing scalable security frameworks that support innovation while managing enterprise risk.\n\nDoes this sound like you? Check out what else RXO has to offer.\nWhy Join Us:\nOur Benefits\nComprehensive medical, dental, and vision plans\n\n401(k) retirement plan with up to 5% company match\n\nPre-tax accounts to help streamline eligible expenses\n\nCompany-paid disability and life insurance\n\nEmployee Assistance Program (EAP)\n\nCareer and Leadership Development Programs\n\nPaid time off, company holidays, and volunteer days\n\nOur Culture\nOur values are the key to our unique culture and our ability to deliver for everyone we serve.\nWe do great things when we are inclusive and work together. To perform with excellence, we learn from one another, value diverse perspectives, operate safely and build strong relationships.\nThe Next Step\nReady to join our team? We'd love to hear from you. Fill out an application now and join our talent community to learn about future opportunities. We are proud to be an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. All applicants who receive a conditional offer of employment may be required to take and pass a pre-employment drug test. The above statements are not an exhaustive list of all required responsibilities, duties, and skills for this job classification. Review RXO's candidate privacy statement here and RXO's Privacy Notice to California Job Applicants here.","description_format":"text","description_chars":6171,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Life insurance","Retirement plans"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Commerce","Transportation & Logistics","Logistics"],"lifecycle":[{"event":"open","at":"2026-10-14T02:00:51Z"},{"event":"close","at":"2026-10-19T09:24:40Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/rxo-lead-engineer-information-security-application-security","json_url":"https://alion.io/job/rxo-lead-engineer-information-security-application-security.json","meta":{"generated_at":"2026-10-21T15:12:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21666,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2176442},"rest":"https://alion.io/mcp/rest/get_company?id=2176442"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frxo-lead-engineer-information-security-application-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frxo-lead-engineer-information-security-application-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frxo-lead-engineer-information-security-application-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rxo-lead-engineer-information-security-application-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frxo-lead-engineer-information-security-application-security"}]}