Application Security Engineer – Build Secure, Resilient Apps

United Airlines; Chicago (IL); Remote; USD 90,000 - 117,000; Full time

Benefits offered by this job

Flight privileges

Medical benefits

Parental leave

Job summary

United Airlines is seeking an Engineer - Application Cybersecurity to ensure services, applications, and websites meet secure development standards. You will collaborate with development, product, and security teams to embed security across the product lifecycle from design to deployment.

The role supports automated security tooling, vulnerability assessments, and remediation guidance, with a focus on CI/CD and secure coding practices. Valid work authorization in the U.S. is required.

Qualifications

• Bachelor's degree in STEM field and 2+ years in related field.
• Automation scripting (Python preferred) or coding experience.
• Knowledge of OWASP Top 10 and CWE 25.
• Understanding of DevSecOps and CI/CD.
• Experience with application testing (SAST, DAST, MAST, RAST, IAST).
• Familiarity with web/app security stack and cloud security.

Responsibilities

• Improve security accessibility through automation and CI/CD pipelines.
• Perform code analysis and vulnerability remediation guidance.
• Define and communicate security best practices to product teams.
• Support security architecture reviews and threat modelling of products.

Skills

Python scripting

OWASP Top 10

DevSecOps / CI-CD

Application security testing

Programming languages

Cloud technologies

SOP / documentation

Communication & collaboration

Education

Bachelor's degree in STEM

Tools

AWS

Job description

United Airlines is seeking an Engineer - Application Cybersecurity to ensure services, applications, and websites meet secure development standards. You will collaborate with development, product, and security teams to embed security across the product lifecycle from design to deployment.

The role supports automated security tooling, vulnerability assessments, and remediation guidance, with a focus on CI/CD and secure coding practices. Valid work authorization in the U.S. is required.