Application Security Engineer - DevSecOps & Secure SDLC

Epicor Software Corp; Washington, Baltimore (District of Columbia, MD); On-site; USD 94,000 - 151,000; Full time

Benefits offered by this job

Health and Wellness

Internal Mobility

Career Development

Inclusive Workplace

Work-Life Balance

Global Mobility

Job summary

Epicor Software Corporation is seeking an IT Security Engineer to partner with development teams to strengthen application security, integrate security across the SDLC, and remediate vulnerabilities.

You will support DevSecOps practices, perform threat modeling and security architecture reviews, and translate risk into practical guidance for technical and business stakeholders. This role offers the opportunity to influence secure design and delivery across our software estate.

Qualifications

• 5+ years of experience in information security.
• Experience with DevSecOps and integrating security into CI/CD pipelines.
• Experience working with code and partnering with software development teams to remediate security vulnerabilities.
• Experience performing threat modeling, security architecture reviews, and risk assessments.
• Strong information security fundamentals and ability to communicate recommendations clearly to technical and business stakeholders.

Responsibilities

• Partner with software development teams to identify, assess, prioritize, and remediate application security vulnerabilities.
• Integrate security practices and controls throughout CI/CD pipelines and the software development lifecycle.
• Perform threat modeling and security architecture reviews to identify risks and recommend controls.
• Review applications, code, and solutions from a security perspective to enable secure design and implementation.
• Assess security risks and translate findings into practical recommendations for stakeholders.
• Collaborate with development and technology teams to embed secure practices into day-to-day engineering workflows.
• Apply information security fundamentals while maturing application security and DevSecOps practices.

Skills

Application security

DevSecOps

Threat modeling

Security architecture

Communication with engineering teams

Job description

Epicor Software Corporation is seeking an IT Security Engineer to partner with development teams to strengthen application security, integrate security across the SDLC, and remediate vulnerabilities.

You will support DevSecOps practices, perform threat modeling and security architecture reviews, and translate risk into practical guidance for technical and business stakeholders. This role offers the opportunity to influence secure design and delivery across our software estate.