DevSecOps Security Engineer - Secure SDLC & Remediation

Epicor Software Corp; Lehi (UT); On-site; USD 94,000 - 151,000; Full time

Benefits offered by this job

Health and Wellness

Internal Mobility

Career Development

Inclusive Workplace

Work-Life Balance

Global Mobility

Job summary

Epicor Software Corporation is seeking an IT Security Engineer to partner with development teams to strengthen application security across the SDLC and support DevSecOps practices. You will work closely with engineering to identify and remediate vulnerabilities and embed security throughout the software delivery process.

You will perform threat modeling, security architecture reviews, and translate risks into practical recommendations for technical and business stakeholders.

Qualifications

• 5+ years’ experience in information security, including strong hands-on depth in application security.
• Experience with DevSecOps and integrating security into CI/CD pipelines.
• Experience working with code and partnering with software development teams to remediate security vulnerabilities.
• Experience performing threat modeling, security architecture reviews, and risk assessments.

Responsibilities

• Partner with software development teams to identify, assess, prioritize, and remediate application security vulnerabilities.
• Integrate security practices and controls throughout CI/CD pipelines and the software development lifecycle.
• Perform threat modeling and security architecture reviews to identify risks and recommend controls.
• Review applications, code, and solutions from a security perspective to guide secure design and implementation decisions.
• Assess security risks and translate findings into practical recommendations for technical and business stakeholders.
• Collaborate with development and technology teams to strengthen secure development practices.
• Apply information security fundamentals while maturing DevSecOps practices.

Skills

Application security

DevSecOps

Threat modeling

Security risk assessment

Security architecture reviews

Job description

Epicor Software Corporation is seeking an IT Security Engineer to partner with development teams to strengthen application security across the SDLC and support DevSecOps practices. You will work closely with engineering to identify and remediate vulnerabilities and embed security throughout the software delivery process.

You will perform threat modeling, security architecture reviews, and translate risks into practical recommendations for technical and business stakeholders.