Senior Application Security Engineer — SDLC & DevSecOps

Eli Lilly and Company; Cork; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Premium workspace

Hybrid working

Healthcare

Pension

Life assurance

Canteen

Onsite gym

Travel subsidies

On-site parking

Educational assistance

Wellbeing initiatives

Job summary

Eli Lilly Cork is seeking an Application Security Engineer to join the Security Architecture and Engineering team. You will integrate application security testing tools into the SDLC and work with engineering teams to enable secure coding practices and coordinated remediation.

This role requires deep knowledge of SAST, DAST, SCA, and secrets management; you’ll secure containers, collaborate with DevOps, and develop security guidance and threat models.

Qualifications

• Bachelor’s degree in Cyber Security, Computer Science, Information Technology, or related field.

Responsibilities

• Integrate SAST, SCA, Secrets scanning, and DAST into the Software Development Lifecycle (SDLC).
• Lead secure coding practices and coordinate remediation.
• Collaborate with DevOps to embed security checks into development and deployment processes.
• Secure containers in on-prem and cloud environments.
• Develop and maintain technical security guidance and threat modeling.
• Coordinate vulnerability remediation with SecOps and stakeholders.
• Triage critical and zero-day vulnerabilities and escalate as needed.
• Improve security processes and metrics for application security.
• Engage with stakeholders to refine how security metrics are calculated and communicated.

Skills

DevSecOps practices

End-to-end security testing

SDLC security integration

Education

Bachelor’s degree in Cyber Security, Computer Science, Information Technology, or related field

Tools

Checkmarx

Github

Job description

Eli Lilly Cork is seeking an Application Security Engineer to join the Security Architecture and Engineering team. You will integrate application security testing tools into the SDLC and work with engineering teams to enable secure coding practices and coordinated remediation.

This role requires deep knowledge of SAST, DAST, SCA, and secrets management; you’ll secure containers, collaborate with DevOps, and develop security guidance and threat models.