DevSecOps Security Engineer

Epicor Software Corp; Bensalem Township (Bucks County); Hybrid; USD 94,000 - 151,000; Full time

Benefits offered by this job

Health and Wellness

Internal Mobility

Career Development

Inclusive Workplace

Work-Life Balance

Global Mobility

Job summary

Epicor Software Corp IT Security Engineer role seeks to embed security across design, development, and delivery. You will partner with development teams to strengthen application security, identify and remediate vulnerabilities, and advance DevSecOps practices.

Join a collaborative environment to perform threat modeling, security architecture reviews, and risk-based recommendations, translating findings for technical and business stakeholders.

Qualifications

• 5+ years' experience in information security, including strong hands-on depth in application security.
• Experience with DevSecOps and integrating security into CI/CD pipelines.
• Experience working with code and partnering with software development teams to remediate security vulnerabilities.
• Experience performing threat modeling and security architecture reviews.
• Strong information security fundamentals and ability to communicate recommendations clearly.

Responsibilities

• Partner with software development teams to identify, assess, prioritize, and remediate application security vulnerabilities.
• Integrate security practices into CI/CD pipelines and the broader SDLC.
• Perform threat modeling and security architecture reviews to identify risks and recommend controls.
• Review applications, code, and technical solutions from a security perspective to guide secure design and implementation.
• Translate security findings into actionable, clear recommendations for stakeholders.

Skills

Application security

DevSecOps

Threat modeling

Security architecture

Vulnerability remediation

Stakeholder communication

Job description

Epicor Software Corp IT Security Engineer role seeks to embed security across design, development, and delivery. You will partner with development teams to strengthen application security, identify and remediate vulnerabilities, and advance DevSecOps practices.

Join a collaborative environment to perform threat modeling, security architecture reviews, and risk-based recommendations, translating findings for technical and business stakeholders.