Application Security Engineer — DevSecOps (Hybrid)

Epicor Software Corporation; Minneapolis (MN); Hybrid; USD 94,000 - 151,000; Full time

Benefits offered by this job

Health and Wellness

Internal Mobility

Career Development

Inclusive Workplace

Work-Life Balance

Global Mobility

Job summary

Epicor Software Corporation seeks an IT Security Engineer to partner with development teams and embed security across the SDLC, from design to delivery. You will drive threat modeling, security architecture reviews, and DevSecOps integration, delivering practical risk-based recommendations and strengthening secure development practices.

This hybrid role supports collaboration across software environments and business stakeholders.

Qualifications

• 5+ years in information security with hands-on app security experience.
• Experience with DevSecOps and securing CI/CD pipelines.
• Ability to communicate recommendations clearly to technical and business stakeholders.
• Experience performing threat modeling and security architecture reviews.

Responsibilities

• Partner with development teams to identify and remediate application security issues.
• Integrate security into CI/CD pipelines and SDLC.
• Perform threat modeling and security architecture reviews.
• Review applications and code from a security perspective to guide secure design.
• Translate security findings into actionable recommendations for stakeholders.
• Collaborate to strengthen secure development practices across engineering teams.

Skills

App security

DevSecOps

Threat modeling

Security architecture

Communication

Job description

Epicor Software Corporation seeks an IT Security Engineer to partner with development teams and embed security across the SDLC, from design to delivery. You will drive threat modeling, security architecture reviews, and DevSecOps integration, delivering practical risk-based recommendations and strengthening secure development practices.

This hybrid role supports collaboration across software environments and business stakeholders.