Senior Application Security Engineer

Unum; Carlow; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

25 days annual leave

Paid health insurance

Pension scheme

Annual performance-based bonus

Maternity/paternity/adoptive leave

Reward programs

Community activities

Job summary

Unum is seeking a Senior Application Security Engineer in Carlow, Ireland, to embed security across the SDLC and strengthen cloud and application security practices. You will partner with engineering, architecture and platform teams to build secure-by-design solutions, integrate security into CI/CD, lead threat modelling and remediation, and grow security capabilities across teams in Ireland and the US.

You will drive secure coding standards, mentor engineers, and deliver security workshops

Qualifications

• 5+ years’ experience in application security, software engineering or a related technical security role.
• Strong development experience in at least one language such as Java, C#, Python or JavaScript.
• Hands-on experience with application security testing technologies including SAST, DAST, SCA and Infrastructure as Code scanning.
• Strong understanding of secure software development, DevSecOps and CI/CD environments such as GitHub Actions, Jenkins or GitLab CI.
• Experience securing cloud-native applications and environments, ideally AWS, including Docker and Kubernetes.
• Strong knowledge of API security, authentication and authorisation standards.

Responsibilities

• Embed secure-by-design and DevSecOps practices throughout the SDLC with engineering teams.
• Design and implement security controls, automation and guardrails within CI/CD pipelines.
• Lead threat modelling, application security reviews and vulnerability remediation across applications and platforms.
• Identify and assess vulnerabilities using SAST, DAST, SCA, pentesting and code review.
• Build reusable security frameworks, libraries, SDKs, secure templates and automation.
• Strengthen cloud, container and infrastructure security across environments including AWS, Docker, Kubernetes and IaC.
• Improve API security using OAuth 2.0, OpenID Connect, SAML and API gateways including MuleSoft.
• Develop automation for vulnerability triage, remediation and security reporting.
• Partner with Security Champions and engineering teams to establish secure coding standards.
• Mentor engineers and deliver security workshops and guidance.
• Support security incident response and compliance initiatives.
• Help define security metrics and drive improvements in application security maturity.

Skills

Application security

DevSecOps

Threat modelling

Cloud security

CI/CD security

SAST/DAST/Software compositionAnalysis

Vulnerability management

Security automation

Strong communication

Tools

SAST

DAST

SCA

OWASP

CI/CD tooling

IaC security tooling

Cloud platforms (AWS)

Job description

Our Story

Unum Technology Centre in Carlow serves as a strategic software development and IT services centre supporting Unum, a leading provider of income protection in the US. Our team of IT professionals build solutions and critical business applications to digitally transform the way we do business.

Job Summary

We are seeking a Senior Application Security Engineer to help embed security across the Software Development Lifecycle and strengthen our application and cloud security practices. This is a senior hands‑on role partnering with engineering, architecture and platform teams to build secure‑by‑design solutions, integrate security into CI/CD pipelines, lead threat modelling and vulnerability remediation, and develop security capability across teams in Ireland and the US.

The Role

• Embed secure-by-design and DevSecOps practices throughout the SDLC, working closely with engineering, architecture and platform teams.
• Design and implement security controls, automation and guardrails within CI/CD pipelines.
• Lead threat modelling, application security reviews and vulnerability remediation across applications and platforms.
• Identify and assess vulnerabilities using SAST, DAST, SCA, penetration testing and manual code review.
• Build reusable security frameworks, libraries, SDKs, secure templates and automation that enable development teams to adopt security controls effectively.
• Strengthen cloud, container and infrastructure security across environments including AWS, Docker, Kubernetes and Infrastructure as Code.
• Improve API security using technologies and standards such as OAuth 2.0, OpenID Connect, SAML and API gateways including MuleSoft.
• Develop automation for vulnerability triage, remediation and security reporting.
• Partner with Security Champions and engineering teams to establish secure coding standards, guidance and best practices.
• Mentor engineers and deliver security workshops, training and technical guidance across teams.
• Support security incident response, remediation and relevant compliance initiatives.
• Help define security metrics and drive measurable improvements in application security maturity.

What You Offer

• 5+ years’ experience in application security, software engineering or a related technical security role.
• Strong development experience in at least one language such as Java, C#, Python or JavaScript.
• Hands‑on experience with application security testing technologies including SAST, DAST, SCA and Infrastructure as Code scanning.
• Strong understanding of secure software development, DevSecOps and CI/CD environments such as GitHub Actions, Jenkins or GitLab CI.
• Experience securing cloud‑native applications and environments, ideally AWS, including Docker and Kubernetes.
• Strong knowledge of API security, authentication and authorisation standards.
• Experience with threat modelling, vulnerability management and common application security frameworks including OWASP Top 10, ASVS, CVSS, MITRE ATT&CK and STRIDE.
• Ability to build scripts, automation or internal tooling to scale security practices across engineering teams.
• Knowledge of software supply chain security, secure package/artifact management and container registries.
• Strong analytical, problem‑solving and communication skills, with the ability to influence technical and non‑technical stakeholders.
• Experience mentoring or enabling engineers in secure development practices.

Desirable experience includes:

Relevant certifications such as OSCP, CSSLP or CISSP; policy-as-code technologies such as Open Policy Agent; service meshes such as Istio; secure runtimes; security community/open-source contributions; and experience supporting security standards or regulations such as ISO 27001, SOC 2, PCI DSS, HIPAA or GDPR.

#ijadv

#LI-SF1

#LI-Hybrid

#Hybrid

What We Offer

Our size and successful history in Carlow means we can offer you exceptional development and progression, supported by continual learning programs, IT Certifications & third level tuition reimbursement. We offer work-life-balance with flexible working arrangements (including hybrid) and initiatives in support of your well-being. Our attractive range of benefits and reward initiatives includes competitive compensation, 25 days annual leave, paid health insurance, pension scheme, annual performance-based bonus, paid maternity/paternity/adoptive leave, reward programs, and an opportunity to engage with charity and community activities.

• competitive compensation
• 25 days annual leave
• paid health insurance
• pension scheme
• annual performance-based bonus
• paid maternity/paternity/adoptive leave
• reward programs
• an opportunity to engage with charity and community activities

Company:

Unum