Application Security Engineer — Kubernetes & Cloud

Cboe Global Markets; Chicago (IL); On-site; USD 102,850 - 133,100; Full time

Benefits offered by this job

Competitive salary

Health benefits

401(k) match

Stock purchase plan

Paid time off

Tuition assistance

Paid parental leave

Job summary

Cboe Global Markets is seeking an Application Security Engineer to advance secure containerized services on Kubernetes within a fast-paced security team. You will collaborate with software and platform teams to design, build, and deploy secure services, with hands-on code work and a focus on practical security fixes.

The role emphasizes threat modeling, secure coding practices, and integrating SAST/SCA/secret scanning into CI/CD workflows, reporting to the Manager, Cybersecurity.

Qualifications

• 2+ years of professional experience in software engineering, application security, or a closely related role.
• Hands-on software development experience and ability to read/modify existing codebases.
• Experience building and running Docker/OCI containers; understanding of images, layers, runtime behavior.
• Familiarity with Kubernetes (pods, deployments, services, ingress) and security concepts (RBAC, namespaces).
• Knowledge of common web and API vulnerabilities and secure coding practices.
• Proficiency in at least one backend language (Go, Java, C#, Python, Node.js).
• Exposure to app security tooling such as SAST, SCA, secret scanning tools.

Responsibilities

• Partner with engineering teams to improve security of containerized services on Kubernetes.
• Participate in secure design reviews and threat modeling for new features and APIs.
• Perform code-level security reviews and provide remediation guidance to developers.
• Integrate security tooling in CI/CD pipelines (SAST, SCA, secret scanning).
• Validate and triage security findings and prioritize remediation by impact.
• Define and apply secure coding/deployment standards for Kubernetes workloads.

Skills

Security engineering

Go/Java/C#/Python

Docker/OCI

Kubernetes

Web/API security

CI/CD

SAST/SCA/Secrets tools

Code reviews

Education

Bachelor's degree in CS/Info Security

Bachelor's degree preferred

Tools

Docker

Kubernetes

CI/CD tooling

Job description

Cboe Global Markets is seeking an Application Security Engineer to advance secure containerized services on Kubernetes within a fast-paced security team. You will collaborate with software and platform teams to design, build, and deploy secure services, with hands-on code work and a focus on practical security fixes.

The role emphasizes threat modeling, secure coding practices, and integrating SAST/SCA/secret scanning into CI/CD workflows, reporting to the Manager, Cybersecurity.