Senior AppSec Engineer - Secure by Design & CI/CD

C5020 Unum Ireland Limited; Carlow; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

25 days annual leave

Paid health insurance

Pension scheme

Annual performance-based bonus

Parental leave

Job summary

Unum Ireland seeks aSenior Application Security Engineer to embed security across the Software Development Lifecycle and strengthen application and cloud security practices.

You will partner with engineering, architecture and platform teams to build secure-by-design solutions, integrate security into CI/CD pipelines, lead threat modelling and remediation, and develop security capability across teams in Ireland and the US.

Qualifications

• 5+ years in application security or related security role.
• Strong development experience in Java, C#, Python or JavaScript.
• Hands-on with SAST, DAST, SCA and IaC scanning.
• Strong knowledge of secure SDLC, DevSecOps and CI/CD tools.

Responsibilities

• Embed secure-by-design and DevSecOps in the SDLC with engineering teams.
• Design and implement security controls and guardrails in CI/CD pipelines.
• Lead threat modelling, app security reviews and remediation across apps and platforms.
• Identify and assess vulnerabilities using SAST/DAST/SCA and manual code review.
• Build reusable security frameworks and automation for development teams.
• Strengthen cloud, container and infrastructure security (AWS, Docker, Kubernetes, IaC).
• Improve API security with OAuth2, OpenID Connect, SAML and API gateways.
• Develop automation for vulnerability triage, remediation and reporting.
• Mentor engineers and deliver security workshops and guidance.

Skills

Application security

DevSecOps

CI/CD

Threat modelling

Vulnerability remediation

Cloud security

AWS

Docker & Kubernetes

Security automation

Communication

Tools

GitHub Actions

Jenkins

GitLab CI

Docker

Kubernetes

OWASP ASVS

SAST

DAST

SCA

Infrastructure as Code scanning

Job description

Unum Ireland seeks aSenior Application Security Engineer to embed security across the Software Development Lifecycle and strengthen application and cloud security practices.

You will partner with engineering, architecture and platform teams to build secure-by-design solutions, integrate security into CI/CD pipelines, lead threat modelling and remediation, and develop security capability across teams in Ireland and the US.