App Security Engineer – DevSecOps & Threat Modeling

Epicor Software Corp; Philadelphia (Philadelphia County); On-site; USD 94,000 - 151,000; Full time

Benefits offered by this job

Health and Wellness

Internal Mobility

Career Development

Inclusive Workplace

Work-Life Balance

Global Mobility

Job summary

Epicor Software Corporation seeks an IT Security Engineer to embed security across the SDLC. You will partner with development teams to strengthen applications, identify and remediate vulnerabilities, and support DevSecOps practices.

Responsibilities include threat modeling, security architecture reviews, and practical risk-based recommendations. You will translate security findings for technical and business stakeholders and help mature our secure development workflows.

Qualifications

• 5+ years in information security with strong application security background.
• Experience integrating security into CI/CD pipelines and DevSecOps.
• Experience partnering with software teams to remediate vulnerabilities.
• Hands-on threat modeling and security architecture reviews.
• Clear communication with technical and business stakeholders.

Responsibilities

• Partner with software development teams to identify, assess, prioritize, and remediate application security vulnerabilities.
• Integrate security practices and controls throughout CI/CD pipelines and the software development lifecycle.
• Perform threat modeling and security architecture reviews to identify risks and recommend controls.
• Review applications, code, and solutions from a security perspective to guide secure design and implementation.
• Translate findings into practical recommendations for technical and business stakeholders.
• Collaborate with teams to strengthen secure development practices and embed security into workflows.
• Contribute to maturity of application security and DevSecOps practices.

Skills

Application security

DevSecOps

Vulnerability remediation

Threat modeling

Security architecture reviews

Job description

Epicor Software Corporation seeks an IT Security Engineer to embed security across the SDLC. You will partner with development teams to strengthen applications, identify and remediate vulnerabilities, and support DevSecOps practices.

Responsibilities include threat modeling, security architecture reviews, and practical risk-based recommendations. You will translate security findings for technical and business stakeholders and help mature our secure development workflows.