Application Security Engineer: Secure Apps & AI Defenses

United Airlines; Chicago (IL); Remoto; USD 90.000 - 117.000; Tempo pieno

Vantaggi offerti da questo lavoro

Flight privileges

Healthcare benefits

401(k)

Descrizione del lavoro

United Airlines is seeking an Engineer- Application Cybersecurity to ensure services, applications, and websites meet secure development standards. You will collaborate with development and product teams to integrate security into the product lifecycle from design through deployment.

Responsibilities include code analysis with security testing tools, automating security in CI/CD, defining security best practices, and supporting threat modeling and security reviews.

Competenze

• Bachelor's degree required, STEM field preferred.
• Minimum of 2 years of relevant experience or ECDLP.
• Working knowledge of OWASP Top 10 and CWE 25.
• Experience designing, developing, or integrating AI-powered security agents and automated workflows across the SDLC.
• Basic understanding of threat modeling and DevSecOps (CI/CD).
• Working knowledge of SAST, DAST, MAST, RAST, IAST.
• Programming and scripting proficiency.
• Authorized to work in the United States without sponsorship.

Mansioni

• Perform code analysis of applications using security testing solutions.
• Improve security through automation and CI/CD pipelines.
• Define and communicate security best practices and standards for product teams.
• Support security architecture reviews and threat modeling of products.

Conoscenze

OWASP Top 10

DevSecOps (CI/CD)

Programming & scripting

AI-powered security

Formazione

Bachelor's degree in STEM

Strumenti

AWS

CI/CD templates

Application security tools

Descrizione del lavoro

United Airlines is seeking an Engineer- Application Cybersecurity to ensure services, applications, and websites meet secure development standards. You will collaborate with development and product teams to integrate security into the product lifecycle from design through deployment.

Responsibilities include code analysis with security testing tools, automating security in CI/CD, defining security best practices, and supporting threat modeling and security reviews.