4 дня назад
Senior Application Security Engineer (Cloud Security)
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Senior Application Security Engineer (Cloud Security): Embedding secure-by-design practices across the software development lifecycle and strengthening application and cloud security with an accent on DevSecOps, CI/CD controls, threat modelling, and vulnerability remediation. Focus on building reusable security automation, securing AWS and container environments, improving API security, and enabling engineering teams through standards, tooling, and training.
Location: Carlow, Ireland; hybrid working arrangement
Company
Technology Centre in Carlow is a strategic software development and IT services centre supporting , a provider of income protection in the US.
What you will do
- Embed secure-by-design and DevSecOps practices across the software development lifecycle with engineering, architecture, and platform teams.
- Design security controls, automation, and guardrails for CI/CD pipelines, including reusable frameworks, libraries, SDKs, secure templates, and internal tooling.
- Lead threat modelling, application security reviews, vulnerability assessment, remediation, and security reporting using SAST, DAST, SCA, penetration testing, and manual code review.
- Strengthen cloud, container, infrastructure-as-code, software supply chain, and API security across AWS, Docker, Kubernetes, and related environments.
- Establish secure coding standards, mentor engineers, deliver security workshops, and support incident response, compliance initiatives, and application security metrics.
Requirements
- 5+ years of experience in application security, software engineering, or a related technical security role.
- Strong development experience in at least one of Java, C#, Python, or JavaScript.
- Hands-on experience with SAST, DAST, SCA, and infrastructure-as-code scanning.
- Strong understanding of secure software development, DevSecOps, and CI/CD environments such as GitHub Actions, Jenkins, or GitLab CI.
- Experience securing cloud-native applications and environments, including AWS, Docker, and Kubernetes.
- Strong knowledge of API security, authentication, and authorisation standards.
- Experience with threat modelling, vulnerability management, OWASP Top 10, ASVS, CVSS, MITRE ATT&CK, and STRIDE.
- Ability to build scripts, automation, or internal tooling; knowledge of software supply chain security, secure package and artifact management, and container registries.
- Strong analytical, problem-solving, and communication skills, including the ability to influence technical and non-technical stakeholders and mentor engineers.
Nice to have
- Certifications such as OSCP, CSSLP, or CISSP.
- Experience with Open Policy Agent, Istio, secure runtimes, security community or open-source contributions.
- Experience supporting ISO 27001, SOC 2, PCI DSS, HIPAA, or GDPR standards and regulations.
Culture & Benefits
- Hybrid and flexible working arrangements with work-life-balance and well-being initiatives.
- Continual learning programs, IT certifications, and third-level tuition reimbursement.
- 25 days of annual leave, paid health insurance, pension scheme, and annual performance-based bonus.
- Paid maternity, paternity, and adoptive leave, reward programs, and opportunities to participate in charity and community activities.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →
Музыка
Осень
Поддержка