Sr. Engineer, Application Security

Carnival Corporation is hiring a Senior Application Security Engineer to implement and maintain software security capabilities for its global brands in a cloud-based environment. The role develops security controls, automation, and cloud infrastructure; reviews applications and releases; and works with development and operations teams to advance secure software practices.

Responsibilities:

• Program, engineer, implement, and administer IT Security technical controls and tools to assess vulnerabilities, misconfigurations and incidents
• Consult with development teams to test and assess software vulnerabilities from sources like security scanners and bug bounty programs
• Implement and automate new governance processes and controls to ensure that application security activities are being carried out and are done so easily by software development teams
• Develop and maintain cloud infrastructure and Kubernetes clusters using modern techniques like infrastructure as code (IaC) to host Application Security capabilities for consumption by brand teams
• Perform security reviews of applications and releases to ensure they meet relevant policies, standards, and guidelines

Requirements:

• Bachelor's Degree in Computer Science, Software Engineering, Mathematics, or similar
• 5+ years of professional experience
• Hands-on experience writing software applications, including APIs, web applications, and scripts
• Strong experience operating and administrating common security tools like SAST and DAST scanners
• Strong experience communicating security findings to teams and following through on remediation efforts
• Hand-on experience performing threat modeling and adversarial testing of software applications
• Hands-on experience with cloud-native application development and operations, including the use of CI/CD pipelines, cloud compute resources, and containerization (e.g. Docker and Kubernetes)