Application Security Engineer: Kubernetes & CI/CD

Cedar Cares, Inc; Chicago (IL); On-site; USD 102,850 - 133,100; Full time

Benefits offered by this job

Competitive salary

Incentive compensation

Generous paid time off

Health, dental, vision benefits

2:1 401(k) match up to 8%

Employee Stock Purchase Plan

Training and education opportunities

Parental leave and fertility benefits

Volunteer opportunities

Job summary

Cboe Global Markets is seeking an Application Security Engineer to join its security team in Chicago, partnering with engineering to build secure containerized services on Kubernetes and advance application security expertise.

Responsibilities include code‑level security reviews, threat modeling, and integrating security tooling into CI/CD pipelines while guiding secure coding and deployment standards across Kubernetes workloads and APIs.

Qualifications

• 2+ years of professional experience in software engineering, application security, or a closely related role.
• Hands-on software development experience building, testing, and deploying production services.
• Experience building and running Docker/OCI containers and understanding container images, layers, and runtime behavior.
• Familiarity with Kubernetes, including deployments and basic security concepts.
• Knowledge of common web/app vulnerabilities and secure coding practices.
• Proficiency in at least one backend language (Go, Java, C#, Python, Node.js) and modern CI/CD workflows.
• Exposure to application security tooling such as SAST, SCA, or secret scanning.

Responsibilities

• Partner with engineering teams to improve security of containerized services on Kubernetes.
• Participate in secure design reviews and threat modeling for new features, services, and APIs.
• Perform code-level security reviews and provide remediation guidance.
• Integrate and operate security tooling in CI/CD pipelines (SAST, SCA, secret detection).
• Validate findings and prioritize remediation based on impact.
• Contribute to container image security practices and secure base images.
• Define and apply secure coding and deployment standards for Kubernetes workloads and services.

Skills

Go

Java

C#

Python

Node.js

CI/CD

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

Docker/OCI

Kubernetes

SAST tools

SCA tools

Secret scanning tools

Job description

Cboe Global Markets is seeking an Application Security Engineer to join its security team in Chicago, partnering with engineering to build secure containerized services on Kubernetes and advance application security expertise.

Responsibilities include code‑level security reviews, threat modeling, and integrating security tooling into CI/CD pipelines while guiding secure coding and deployment standards across Kubernetes workloads and APIs.