EnerSys
Application Security Engineer
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About EnerSys
EnerSys is a global industrial technology company based in Reading, Pennsylvania, specializing in stored energy solutions. The company manufactures a wide range of products, including reserve-power and motive-power batteries, battery chargers, power equipment, and outdoor equipment enclosures. EnerSys serves mission-critical applications across various industries, emphasizing energy efficiency, reliability, and sustainability. Founded in the early 2000s through a merger of several industrial battery businesses, EnerSys has grown into a multibillion-dollar enterprise. It has expanded its capabilities through over 20 strategic acquisitions, enhancing its offerings in motive power, reserve power, and specialized systems. The company supports over 10,000 customers in 100 countries, providing essential energy storage solutions for sectors such as telecommunications, utilities, transportation, and defense.
Security at EnerSys
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- Section 1: AppSec Philosophy & Stated Priorities ("The Thoughts") Stated AppSec Mission: "embed security into the full software development lifecycle."– EnerSys Careers (Job ID 1293266601), .
- Developer Enablement vs. Gatekeeping: "Serve as a primary liaison between the Cybersecurity and development teams"– LinkedIn Job ID 4371531663, .
- Risk Philosophy: "follow responsible disclosure practices and collaborate with security researchers"– EnerSys CVE Disclosures Page, .
- Stated Pain Points or Goals (Verbatim): "Develop and deliver cybersecurity training programs for development teams"– EnerSys Careers (Job ID 1293266601), .
- Gaps & Contradictions: No specific quotes regarding "paved road"or "security as an enabler"were found beyond general liaison descriptions.
Key Initiatives
- Section 3: AppSec Initiatives & Workflows ("The Initiatives") Security Champions Program: Status: No Evidence Found "Shift Left"in Practice: "Integrate and manage security tooling within CI/CD pipelines"– EnerSys Careers (Job ID 1293266601), .
- Vulnerability Management Process: Intake: "we publicly disclose known cybersecurity vulnerabilities"– EnerSys CVE Disclosures Page, .
- Triage/Remediation: "Analyze and triage security alerts"– EnerSys Careers (Job ID 1289417001), .
- Secure SDLC Artifacts: "Conduct application security assessments, code reviews, API testing, threat modeling, and penetration testing"– LinkedIn Job ID 4371531663, .
- Recent Initiatives (Last 6 Months): "driven TISAX and CMMC/NIST 800-171 alignment"– LinkedIn Profile (Josh Mayer), .
- Gaps & Contradictions: No evidence of a formal Security Champions program or specific remediation SLAs was found.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.