Application Security Engineer: DevSecOps & Threat Modeling

EPIND Epicor India; Minneapolis (MN); Hybrid; USD 94,000 - 151,000; Full time

Benefits offered by this job

Health and Wellness

Internal Mobility

Career Development

Inclusive Workplace

Work-Life Balance

Global Mobility

Job summary

Epicor Software Corporation in Minneapolis, MN, seeks an IT Security Engineer to embed security within the software development lifecycle and strengthen application security across the SDLC. You will partner with development teams to identify and remediate vulnerabilities and deliver risk-based security recommendations.

Responsibilities include threat modeling, security architecture reviews, and integrating security into CI/CD pipelines.

Qualifications

• 5+ years of information security with hands-on application security experience
• Experience with integrating security into CI/CD pipelines (DevSecOps)
• Experience collaborating with software development teams to remediate vulnerabilities
• Experience performing threat modeling and security architecture reviews
• Strong fundamentals in information security and ability to communicate risk to stakeholders

Responsibilities

• Partner with software development teams to identify, assess, prioritize, and remediate application security vulnerabilities.
• Integrate security practices and controls throughout CI/CD pipelines and the software development lifecycle.
• Perform threat modeling and security architecture reviews to identify risks and recommend controls.
• Review applications, code, and technical solutions from a security perspective to guide secure design and implementation.
• Translate security findings into practical recommendations for technical and business stakeholders.

Skills

5+ years information security

DevSecOps

Application security

Threat modeling

Security architecture reviews

Risk assessments

Job description

Epicor Software Corporation in Minneapolis, MN, seeks an IT Security Engineer to embed security within the software development lifecycle and strengthen application security across the SDLC. You will partner with development teams to identify and remediate vulnerabilities and deliver risk-based security recommendations.

Responsibilities include threat modeling, security architecture reviews, and integrating security into CI/CD pipelines.