Application Security Engineer (DevSecOps)

RXinsider LTD.; Bensalem Township, Northern (Bucks County, KY); Hybrid; USD 94,000 - 151,000; Full time

Benefits offered by this job

Health and Wellness

Internal Mobility

Career Development

Inclusive Workplace

Work-Life Balance

Global Mobility

Job summary

Epicor is seeking an IT Security Engineer to embed security into software design, development, and delivery. You will partner with development teams to strengthen application security, remediate vulnerabilities, and integrate security across the SDLC.

Responsibilities include threat modeling, security architecture reviews, and providing practical, risk-based security guidance to technical and business stakeholders. Strong collaboration and communication are essential.

Qualifications

• 5+ years in information security with hands-on application security experience.
• Experience with DevSecOps and integrating security into CI/CD pipelines.
• Experience working with code and partnering with software teams to remediate vulnerabilities.
• Experience performing threat modeling and security architecture reviews.
• Strong information security fundamentals and ability to communicate recommendations clearly.

Responsibilities

• Partner with software development teams to identify, assess, prioritize, and remediate application security vulnerabilities.
• Integrate security practices and controls throughout CI/CD pipelines and the SDLC.
• Perform threat modeling and security architecture reviews to identify risks and recommend controls.
• Review applications, code, and solutions from a security perspective to guide secure design and implementation decisions.
• Translate security findings into practical recommendations for technical and business stakeholders.
• Collaborate with development and technology teams to embed secure development practices.
• Contribute to the maturity of application security and DevSecOps practices.

Job description

Epicor is seeking an IT Security Engineer to embed security into software design, development, and delivery. You will partner with development teams to strengthen application security, remediate vulnerabilities, and integrate security across the SDLC.

Responsibilities include threat modeling, security architecture reviews, and providing practical, risk-based security guidance to technical and business stakeholders. Strong collaboration and communication are essential.