DevSecOps Security Engineer

Epicor Software Corp; Herndon (VA); Hybrid; USD 94,000 - 151,000; Full time

Benefits offered by this job

Health benefits

Internal mobility

Career development

Diversity & inclusion

Work-life balance

Global relocation support

Job summary

Epicor Software Corp is seeking an IT Security Engineer to help embed security into software design, development, and delivery. You will partner with development teams to strengthen application security, identify vulnerabilities, and integrate security across the SDLC in a hybrid work environment.

You will bring 5+ years in information security, hands-on app security, and experience with threat modeling, security reviews, and risk assessments to guide practical, risk-based security decisions.

Qualifications

• 5+ years of information security experience with hands-on application security.
• Experience with DevSecOps and integrating security into CI/CD pipelines.
• Experience working with code and development teams to remediate security issues.
• Experience performing threat modeling, security architecture reviews, and risk assessments.
• Ability to communicate findings clearly to technical and business stakeholders.

Responsibilities

• Partner with software development teams to identify and remediate application security vulnerabilities.
• Integrate security practices throughout CI/CD pipelines and SDLC.
• Perform threat modeling and security architecture reviews to identify risks.
• Review code and solutions from a security perspective to enable secure design decisions.
• Translate security findings into practical recommendations for stakeholders.
• Collaborate with engineering teams to embed secure development practices.

Skills

Application security

DevSecOps

CI/CD security

Threat modeling

Security architecture

Risk assessment

Job description

Epicor Software Corp is seeking an IT Security Engineer to help embed security into software design, development, and delivery. You will partner with development teams to strengthen application security, identify vulnerabilities, and integrate security across the SDLC in a hybrid work environment.

You will bring 5+ years in information security, hands-on app security, and experience with threat modeling, security reviews, and risk assessments to guide practical, risk-based security decisions.