Senior AppSec Engineer - Secure DevOps & Cloud (Hybrid)

Unum; Carlow; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

25 days annual leave

Paid health insurance

Pension scheme

Annual performance-based bonus

Maternity/paternity/adoptive leave

Reward programs

Community activities

Job summary

Unum is seeking a Senior Application Security Engineer in Carlow, Ireland, to embed security across the SDLC and strengthen cloud and application security practices. You will partner with engineering, architecture and platform teams to build secure-by-design solutions, integrate security into CI/CD, lead threat modelling and remediation, and grow security capabilities across teams in Ireland and the US.

You will drive secure coding standards, mentor engineers, and deliver security workshops

Qualifications

• 5+ years’ experience in application security, software engineering or a related technical security role.
• Strong development experience in at least one language such as Java, C#, Python or JavaScript.
• Hands-on experience with application security testing technologies including SAST, DAST, SCA and Infrastructure as Code scanning.
• Strong understanding of secure software development, DevSecOps and CI/CD environments such as GitHub Actions, Jenkins or GitLab CI.
• Experience securing cloud-native applications and environments, ideally AWS, including Docker and Kubernetes.
• Strong knowledge of API security, authentication and authorisation standards.

Responsibilities

• Embed secure-by-design and DevSecOps practices throughout the SDLC with engineering teams.
• Design and implement security controls, automation and guardrails within CI/CD pipelines.
• Lead threat modelling, application security reviews and vulnerability remediation across applications and platforms.
• Identify and assess vulnerabilities using SAST, DAST, SCA, pentesting and code review.
• Build reusable security frameworks, libraries, SDKs, secure templates and automation.
• Strengthen cloud, container and infrastructure security across environments including AWS, Docker, Kubernetes and IaC.
• Improve API security using OAuth 2.0, OpenID Connect, SAML and API gateways including MuleSoft.
• Develop automation for vulnerability triage, remediation and security reporting.
• Partner with Security Champions and engineering teams to establish secure coding standards.
• Mentor engineers and deliver security workshops and guidance.
• Support security incident response and compliance initiatives.
• Help define security metrics and drive improvements in application security maturity.

Skills

Application security

DevSecOps

Threat modelling

Cloud security

CI/CD security

SAST/DAST/Software compositionAnalysis

Vulnerability management

Security automation

Strong communication

Tools

SAST

DAST

SCA

OWASP

CI/CD tooling

IaC security tooling

Cloud platforms (AWS)

Job description

Unum is seeking a Senior Application Security Engineer in Carlow, Ireland, to embed security across the SDLC and strengthen cloud and application security practices. You will partner with engineering, architecture and platform teams to build secure-by-design solutions, integrate security into CI/CD, lead threat modelling and remediation, and grow security capabilities across teams in Ireland and the US.

You will drive secure coding standards, mentor engineers, and deliver security workshops