Senior Application Security Engineer

C5020 Unum Ireland Limited; Carlow; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

25 days annual leave

Paid health insurance

Pension scheme

Annual performance-based bonus

Parental leave

Job summary

Unum Ireland seeks aSenior Application Security Engineer to embed security across the Software Development Lifecycle and strengthen application and cloud security practices.

You will partner with engineering, architecture and platform teams to build secure-by-design solutions, integrate security into CI/CD pipelines, lead threat modelling and remediation, and develop security capability across teams in Ireland and the US.

Qualifications

• 5+ years in application security or related security role.
• Strong development experience in Java, C#, Python or JavaScript.
• Hands-on with SAST, DAST, SCA and IaC scanning.
• Strong knowledge of secure SDLC, DevSecOps and CI/CD tools.

Responsibilities

• Embed secure-by-design and DevSecOps in the SDLC with engineering teams.
• Design and implement security controls and guardrails in CI/CD pipelines.
• Lead threat modelling, app security reviews and remediation across apps and platforms.
• Identify and assess vulnerabilities using SAST/DAST/SCA and manual code review.
• Build reusable security frameworks and automation for development teams.
• Strengthen cloud, container and infrastructure security (AWS, Docker, Kubernetes, IaC).
• Improve API security with OAuth2, OpenID Connect, SAML and API gateways.
• Develop automation for vulnerability triage, remediation and reporting.
• Mentor engineers and deliver security workshops and guidance.

Skills

Application security

DevSecOps

CI/CD

Threat modelling

Vulnerability remediation

Cloud security

AWS

Docker & Kubernetes

Security automation

Communication

Tools

GitHub Actions

Jenkins

GitLab CI

Docker

Kubernetes

OWASP ASVS

SAST

DAST

SCA

Infrastructure as Code scanning

Job description

Our Story Unum Technology Centre in Carlow serves as a strategic software development and IT services centre supporting Unum, a leading provider of income protection in the US. Our team of IT professionals build solutions and critical business applications to digitally transform the way we do business.

Job Summary

We are seeking a Senior Application Security Engineer to help embed security across the Software Development Lifecycle and strengthen our application and cloud security practices. This is a senior hands‑on role partnering with engineering, architecture and platform teams to build secure‑by‑design solutions, integrate security into CI/CD pipelines, lead threat modelling and vulnerability remediation, and develop security capability across teams in Ireland and the US.

The Role

• Embed secure‑by‑design and DevSecOps practices throughout the SDLC, working closely with engineering, architecture and platform teams.
• Design and implement security controls, automation and guardrails within CI/CD pipelines.
• Lead threat modelling, application security reviews and vulnerability remediation across applications and platforms.
• Identify and assess vulnerabilities using SAST, DAST, SCA, penetration testing and manual code review.
• Build reusable security frameworks, libraries, SDKs, secure templates and automation that enable development teams to adopt security controls effectively.
• Strengthen cloud, container and infrastructure security across environments including AWS, Docker, Kubernetes and Infrastructure as Code.
• Improve API security using technologies and standards such as OAuth 2.0, OpenID Connect, SAML and API gateways including MuleSoft.
• Develop automation for vulnerability triage, remediation and security reporting.
• Partner with Security Champions and engineering teams to establish secure coding standards, guidance and best practices.
• Mentor engineers and deliver security workshops, training and technical guidance across teams.
• Support security incident response, remediation and relevant compliance initiatives.
• Help define security metrics and drive measurable improvements in application security maturity.

What You Offer

• 5+ years' experience in application security, software engineering or a related technical security role.
• Strong development experience in at least one language such as Java, C#, Python or JavaScript.
• Hands‑on experience with application security testing technologies including SAST, DAST, SCA and Infrastructure as Code scanning.
• Strong understanding of secure software development, DevSecOps and CI/CD environments such as GitHub Actions, Jenkins or GitLab CI.
• Experience securing cloud‑native applications and environments, ideally AWS, including Docker and Kubernetes.
• Strong knowledge of API security, authentication and authorisation standards.
• Experience with threat modelling, vulnerability management and common application security frameworks including OWASP Top 10, ASVS, CVSS, MITRE ATT&CK and STRIDE.
• Ability to build scripts, automation or internal tooling to scale security practices across engineering teams.
• Knowledge of software supply chain security, secure package/artifact management and container registries.
• Strong analytical, problem‑solving and communication skills, with the ability to influence technical and non‑technical stakeholders.
• Experience mentoring or enabling engineers in secure development practices.

Desirable experience includes:

• Relevant certifications such as OSCP, CSSLP or CISSP;
• policy‑as‑code technologies such as Open Policy Agent;
• service meshes such as Istio;
• secure runtimes;
• security community/open‑source contributions;
• and experience supporting security standards or regulations such as ISO 27001, SOC 2, PCI DSS, HIPAA or GDPR.

What We Offer

• Our size and successful history in Carlow means we can offer you exceptional development and progression, supported by continual learning programs, IT Certifications & third level tuition reimbursement.
• We offer work‑life‑balance with flexible working arrangements (including hybrid) and initiatives in support of your well‑being.
• Our attractive range of benefits and reward initiatives includes competitive compensation, 25 days annual leave, paid health insurance, pension scheme, annual performance‑based bonus, paid maternity/paternity/adoptive leave, reward programs, and an opportunity to engage with charity and community activities.

Company: Unum

Join our talent community to receive notifications about jobs relevant to your interest. Join our Talent Community! At Unum Group, we’re a Fortune 500 company and leading international provider of workplace benefits and services, helping workers and their families thrive for more than 175 years. Through our Unum and Colonial Life brands, our company offers disability, life, accident, critical illness, dental and vision insurance; leave and absence management support; and behavioural health services. Our 10,000+ employees work across operations in the US, UK and Poland, as well as our dedicated Technology Centre in Ireland.

Unum Group is committed to working with and providing reasonable accommodations for any applicant with a disability. If you are disabled and need a reasonable accommodation to participate in the application or hiring process, please contact us by submitting a request here.