Senior Application Security Engineer - Billy Graham Evangelistic Association

Is God calling you to ministry?

For over 70 years, The Billy Graham Evangelistic Association (BGEA) has proclaimed the Gospel through its various ministries. Whether you work at our headquarters in Charlotte, North Carolina, the Billy Graham Library in Charlotte, North Carolina, the Billy Graham Training Center at the Cove (BGTC) in Asheville, North Carolina, Blue Ridge Broadcasting (BRB) in Asheville, North Carolina or a field office abroad, you are part of a team of committed Christians working together to reach people to the ends of the earth with the Gospel.

CHRISTIAN PURPOSE AND EXPECTATIONS:

All employees proclaim the Gospel of Jesus Christ through their employment, and thereby further BGEA’s religious mission.

Department Detail – The Information Technology (IT) Department at BGEA consists of the following areas: IT Operations (networking, routing, storage, server support, services provisioning, security cameras, phones), Helpdesk (desktop support, event support, mobile device support), Application Development and Support (Donor and Financial systems support, custom application development and support, report writing, Tableau data visualization), and Cyber Security (cyber security defense, awareness, monitoring and analysis, and compliance). The IT department furthers the mission of BGEA through supporting, developing, scaling, and securing the assets, infrastructure, and programs required by all areas of the ministry while maintaining and ensuring their availability.

Job Summary – The Senior Application Cybersecurity Engineer leads application security testing and cybersecurity automation/integration.  The Senior Application Cybersecurity Engineer also provides recommendations for secure software development practices and alerts developers to system vulnerabilities.

Ministry Requirements

• Maintains a personal, active relationship with Jesus Christ and is a consistent witness for Jesus Christ
• Faithfully upholds BGEA in prayer
• Participates in daily BGEA staff devotions including Bible reading, and leading group prayer as schedule permits
• Demonstrates behavior aligned with BGEA’s Mission Statement, Statement of Faith, Hallmarks, policies, and expectations
• Effectively represents Jesus Christ to those within both personal and professional spheres of influence

Essential Duties and Responsibilities

• Integrates with the application development team to develop, automate, and integrate an application security testing program; including static and dynamic application testing tools into the secure development lifecycle based on industry-standard best practices.
• Develops training, recommends courses, and helps educate application developers on secure coding best practices, OWASP Top 10, and should be able to advise developers in optimizing code for security.
• Helps application developers maintain continual data, device, and account inventories, secure configurations, and application vulnerability scanning/remediation processes; recommending needed security patches and controls for IT systems.
• Acts as a liaison between the application developers and cybersecurity teams; to assist the cybersecurity team in understanding the security of application development.
• Helps cybersecurity team integrate and automate cybersecurity processes, software, and tools to take advantage of correlation between multiple data sets, logs, and inventories.
• Assists in the monitoring, reporting, and responding to cybersecurity incidents; developing and maintaining an incident response plan; conducting regular incident response table top exercises, and helping train application developers in incident response.
• Help ensure ministry compliance with CIS Critical Controls, NIST Cybersecurity Framework, PCI-DSS, HIPAA, third party pen test/risk assessments, and other yearly audit requirements.
• Constantly maintain awareness of cybersecurity events, threat, application and development related counter-measures and emerging technologies.
• Available to provide on-call support as needed by management to fulfill the department Service Level Agreement and Internal Operating Procedures.
• Follow policies and procedures of the BGEA as set forth in the Policy Manual.

Marginal Duties and Responsibilities

• Assists development teams and other cross-functional groups on projects when needed, as directed by management.
• Based on industry standards, develops, implements, and maintains cybersecurity policies and procedures related to secure web and application development, as well as associated plans for secure application development processes and workflows.
• Liaises with internal and external auditors and penetration testers as required.  Works with application development teams to summarize, explain, and create remediation plans related to penetration tests and audit results.

Job Specifications

Skills and Knowledge

• Ability to work at both a strategic and tactical levels
• Effective organizational and interpersonal skills including written and verbal communication skills
• Ability to serve as technical application security expert across the organization
• Bachelor’s degree OR four (4) years related experience and/or training; or equivalent combination of education and experience.
• Familiar with programming languages C#, .NET, JavaScript, Python, PHP/MySQL, Node.js, Golang, MongoDB.  Experience with Git, Jenkins, and Ansible a plus.

Physical/Mental Demands

• Ability to perform essential functions of job
• Ability to move from place to place, to sit, handle, feel, reach, climb, balance, stoop, kneel, crouch, crawl, talk and hear
• Close vision, distance vision, color vision, peripheral vision, and ability to adjust focus

Working Conditions

• Work is typically performed in standard office and technology environments

Mission Statement

Continuing the lifelong work of Billy Graham, the Billy Graham Evangelistic Association exists to support and extend the evangelistic calling and ministry of Franklin Graham by proclaiming the Gospel of the Lord Jesus Christ to all we can by every effective means available to us and by equipping the church and others to do the same.

Statement of Faith

These core beliefs make up the foundation upon which all our ministry endeavors are based.

• We believe the Bible to be the inspired, the only infallible, authoritative Word of God revealing the love of God to the world.  (1 Thessalonians 2:13; 2 Timothy 3:15-17; John 3:16).
• We believe that there is one God, eternally existent in three persons: Father, Son, and Holy Spirit.
  (Matthew 28:19; John 10:30; Ephesians 4:4-6).
• We believe in the deity of the Lord Jesus Christ, in His virgin birth, in His sinless life, in His miracles, in His vicarious and atoning death through His shed blood on the cross, in His bodily resurrection, in His ascension to the right hand of the Father, and in His personal return in power and glory. (Matthew 1:23; John 1:1-4 and 1:29; Acts 1:11 and 2:22-24; Romans 8:34; 1 Corinthians 15:3-4; 2 Corinthians 5:21; Philippians 2:5-11; Hebrews 1:1-4 and 4:15).
• We believe that all men everywhere are lost and face the judgment of God, that Jesus Christ is the only way of salvation, and that for the salvation of lost and sinful man, repentance of sin and faith in Jesus Christ results in regeneration by the Holy Spirit. Furthermore, we believe that God will reward the righteous with eternal life in heaven, and that He will banish the unrighteous to everlasting punishment in hell. (Luke 24:46-47; John 14:6; Acts 4:12; Romans 3:23; 2 Corinthians 5:10-11; Ephesians 1:7 and 2:8-9; Titus 3:4-7).
• We believe in the present ministry of the Holy Spirit, whose indwelling enables the Christian to live a godly life. (John 3:5-8; Acts 1:8 and 4:31; Romans 8:9; 1 Corinthians 2:14; Galatians 5:16-18; Ephesians 6:12; Colossians 2:6-10).
• We believe in the resurrection of both the saved and the lost; the saved unto the resurrection of eternal life and the lost unto the resurrection of damnation and eternal punishment. (1 Corinthians 15:51-57; Revelation 20:11-15).
• We believe in the spiritual unity of believers in the Lord Jesus Christ and that all true believers are members of His body, the church.  (1 Corinthians 12:12, 27; Ephesians 1:22-23).
• We believe that the ministry of evangelism (sharing and proclaiming the message of salvation only possible by grace through faith in Jesus Christ) and discipleship (helping followers of Christ grow up into maturity in Christ) is a responsibility of all followers of Jesus Christ.  (Matthew 28:18-20; Acts 1:8; Romans 10:9-15;1 Peter 3:15).
• We believe God’s plan for human sexuality is to be expressed only within the context of marriage, that God created man and woman as unique biological persons made for each other. God instituted monogamous marriage between male and female as the foundation of the family and the basic structure of human society. For this reason, we believe that marriage is exclusively the union of one genetic male and one genetic female. (Genesis 2:24; Matthew 19:5-6; Mark 10:6-9; Romans 1:26-27; 1 Corinthians 6:9).
• We believe that we must dedicate ourselves to prayer, to the service of our Lord, to His authority over our lives, and to the ministry of evangelism.  (Matthew 9:35-38; 22:37-39, and 28:18-20; Acts 1:8; Romans 10:9-15 and 12:20-21; Galatians 6:10; Colossians 2:6-10; 1 Peter 3:15).
• We believe that human life is sacred from conception to its natural end; and that we must have concern for the physical and spiritual needs of our fellowmen.  (Psalm 139:13; Isaiah 49:1; Jeremiah 1:5; Matthew 22:37-39; Romans 12:20-21; Galatians 6:10).
• We believe God wonderfully and immutably creates each person biological male or female.  These two distinct, but complementary sexes together reflect the image and likeness of God.  Rejection of one’s biological sex is a rejection of God’s merciful design and creative order.  (Genesis 1:26-27; Mark 10:6; 1 Corinthians 6:9; Deuteronomy 22:5).

Expectations for Ministry Employment

As an employee of Billy Graham Evangelistic Association:

• I acknowledge that the Lord Jesus Christ is my personal Savior and that I am a personal representative of Him.
• I understand that BGEA is a Christian organization whose purpose is proclaiming the message of the Gospel of the Lord Jesus Christ throughout the world.
• I agree that the purpose of my employment with BGEA is to further its Christian purpose, that I am prepared to assist in accomplishing that purpose, and that my role with BGEA plays a vital part in carrying out its Christian purpose and mission.
• I understand that I must exhibit conduct that is consistent with BGEA’s expectations, whether at work or away from work, in keeping with scriptural teachings and principles as set forth in God’s Word, BGEA’s Statement of Faith, and BGEA’s policies including Christian Conduct.
• I understand that BGEA has the right and the responsibility to ensure that its Christian religious purpose is carried on with the highest standards and is not harmed or impeded by conduct that is inconsistent with the Bible, BGEA’s Statement of Faith, its Christian religious purpose, or its policies
• I understand that any of my conduct which is not in keeping with the scriptural teachings and principles as set forth in God’s Word, BGEA’s Statement of Faith, and BGEA’s policies, is inconsistent with BGEA’s Christian religious purpose.
• I understand that if my conduct is determined by BGEA to be inconsistent with its Christian religious purpose, the result will be corrective action up to and including termination from employment.

The Title VII Exception for Employment

The Billy Graham Evangelistic Association (BGEA) is a faith-based religious organization committed to spreading the Good News of Jesus Christ through every effective means.  Consistent with our charitable purpose to share the Christian faith, a requirement for employment at BGEA is affirmation and adherence to our Christian Statement of Faith.  Our Statement of Faith prerequisite for employment is based upon federal law set forth in Title VII of the Civil Rights Act of 1964, 42 U.S.C. Section 2000e-1.