Senior Security Engineer - Lead App Security & Cloud Defenses

Houghton Mifflin Harcourt Co; Dublin; On-site; EUR 90,000 - 150,000; Full time

Job summary

Houghton Mifflin Harcourt seeks a Staff Security Engineer to lead the product and application security roadmap. You will plan, implement, and track security initiatives across engineering, product management, and risk teams.

You will communicate security directives to staff and executives and drive improvements in secure design, coding, and incident response. The role requires deep experience with SAST/DAST/IAST, WAF, cloud security, and proven collaboration across disparate teams in a

Qualifications

• Experience in leading application security remediations and risk translation.
• Hands-on security design for web apps, APIs, and cloud services.
• Experience with SAST/DAST/IAST, RASP and WAF tooling.
• Strong knowledge of OWASP top vulnerabilities and mitigations.
• Experience in agile development and cross-team collaboration.

Responsibilities

• Lead security remediation efforts across applications and cloud environments.
• Translate security risks into actionable business decisions for stakeholders.
• Coordinate with Engineering, Legal, Risk, and Compliance to improve controls.
• Review security incidents, forensics, and vulnerability management.
• Develop and enforce security controls aligned with CIS/NIST/ISO 27001 frameworks.
• Provide executive-level dashboards and clear security reporting.

Skills

App Eng Mgmt

App Architecture

Security Testing

Spring/MVC

Scripting (Ruby/Python)

Vulnerability Tools

SIEM (Splunk)

Cloud Security

OWASP Knowledge

Web Tech Stack

Web Services (SOAP/REST)

Tools

Nessus

Qualys

Splunk

Sumo Logic

AWS

Job description

Houghton Mifflin Harcourt seeks a Staff Security Engineer to lead the product and application security roadmap. You will plan, implement, and track security initiatives across engineering, product management, and risk teams.

You will communicate security directives to staff and executives and drive improvements in secure design, coding, and incident response. The role requires deep experience with SAST/DAST/IAST, WAF, cloud security, and proven collaboration across disparate teams in a