- Location
- Long Island City New York USA
- Employment
- Full-Time
- Seniority
- Senior
- Compensation
- $90,450–135,000/year
- Department
- IT & Technology Systems
- Posted
- Sep 22, 2026
About Estée Lauder Companies
The Estée Lauder Companies is a global leader in prestige beauty, founded in 1946 by Estée and Joseph Lauder and built on an enduring belief in creativity, high-touch service, and entrepreneurial spirit. As an employer, the Group offers talent the scale of an international house with the energy of distinctive brands across skincare, makeup, fragrance, and hair care. Its culture values innovation, inclusion, learning, and responsible growth, inviting professionals to shape consumer experiences from laboratory to counter, digital platform to boardroom. Employees join a purpose-led organization where heritage, artistry, and scientific excellence meet to define the future of luxury beauty.
Estée Lauder Companies seeks a Senior Analyst, Application Security to evangelize and advance a comprehensive application security strategy across the enterprise. Reporting to the Global Head of Application Security, this role will support strategic initiatives in application modernization, DevSecOps, artificial intelligence, robotics, multi-cloud adoption, and distributed application development. The candidate will ensure security is embedded within the Software Development Life Cycle and contribute to the delivery of trusted products and services to clients, partners, and internal IT/Security teams.
Role & Responsibilities
- Review current security processes used by Software Engineering teams and develop optimization strategies to strengthen the application security posture
- Coordinate and perform vulnerability assessments using both automated and manual testing tools in collaboration with development teams
- Provide consulting and mentoring expertise to Developers, DevOps, and Software Engineering teams to promote and implement the DevSecOps program across the organization
- Analyze vulnerability data to identify security risks and determine false positives requiring remediation
- Prepare security vulnerability and risk management reports for management and key stakeholders
- Deploy best practice Cloud Configuration and Security Management tools and processes into Software Engineering teams
- Provide leadership and coordination skills to drive remediation of vulnerabilities within established timeframes
- Integrate secure development practices into agile development processes and frameworks
- Coach and mentor junior team members in developing advanced security skill sets within a geographically dispersed team environment
Qualifications
- Deep knowledge and understanding of application security vulnerabilities and frameworks (SANS, OWASP)
- Knowledge of threat modeling and risk analysis methodologies
- Strong expertise in internet technologies and web development best practices
- Strong analytical and problem-solving skills with cross-functional knowledge across development and security disciplines
- Understanding of Test Automation tools and frameworks such as SAST, DAST, and IAST
- Ability to communicate security-related concepts to both technical and non-technical audiences
- High degree of integrity, trustworthiness, and ability to lead and inspire organizational change
- Understanding of CI/CD pipelines covering source control, integration, and deployment (Bitbucket, Jenkins, JIRA, Artifactory, Nexus, git)
- Knowledge of securing cloud deployments and container technologies (Ansible, DeMisto, Docker, Kubernetes)
- Understanding of advanced Agile methodologies and iterative development practices
- Familiarity with microservices architecture and design patterns
Skills
Experience
Prior software engineering or architecture experience in languages such as Java, C#, .NET, or JavaScript is preferred. Demonstrated experience operating in agile development environments and integrating secure development practices is required. Proven track record of producing effective and innovative solutions at enterprise scale, with the ability to evaluate evolving security, application, and technology industry trends.
Education
Not explicitly stated; formal training in primary development toolsets, code frameworks, application engines, and database security is required.
Workplace
This position is based in Long Island City, New York, USA, within easy reach of New York City.
Explore jobs in the USA.
Compensation
The base compensation for this position ranges from USD 90,450 to USD 135,000 per annum.
Benefits
Health insurance coverage (medical, dental, and vision insurance), wellness and family support programs, life and disability insurance, retirement savings plans, paid leave programs, education-related programs, paid holidays and vacation time, participation in a highly competitive bonus program with the possibility for overachievement based on performance and company results.
Culture
The Estée Lauder Companies fosters a collaborative, inclusive workplace where creativity, entrepreneurial thinking, and a passion for prestige beauty are deeply valued. As a global house of distinctive brands, it offers employees an environment that encourages innovation, professional growth, and a shared commitment to excellence and consumer inspiration.
About Cerulean
Cerulean is the definitive career portal for the global luxury industry. We match exceptional professionals with exclusive opportunities at the world's most prestigious brands. From haute couture and fine watchmaking to prestige beauty, hospitality, and boutique retail, Cerulean centralises luxury employment to help you find the career for which you were destined.
Frequently Asked Questions
The luxury industry is characterised by a diverse and nuanced nomenclature. Esteemed houses frequently employ proprietary terminology, and even within a single organisation like Estée Lauder Companies, titles may vary across global markets to reflect local conventions. To ensure absolute clarity, Cerulean assigns a standardised, industry-coherent canonical title to every listing. However, it is worth noting that this role is functionally synonymous with «Application Security Engineer», «Senior Security Consultant», «DevSecOps Specialist», «Security Architect», and other variations. Our sophisticated search architecture anticipates these variations, ensuring that inquiries using related terms will seamlessly yield the exact roles you desire.