DevSecOps Security Engineer: Secure SDLC & Threat Modeling

Epicor Software Corp; Austin (TX); Hybrid; USD 94,000 - 151,000; Full time

Benefits offered by this job

Health and Wellness

Internal Mobility

Career Development

Inclusive Workplace

Work-Life Balance

Global Mobility

Job summary

Epicor Software Corp is seeking an IT Security Engineer to embed security throughout software design, development, and delivery. You will partner with development teams to strengthen application security, identify and remediate vulnerabilities, and support DevSecOps practices in the SDLC.

The role requires hands-on app security work, threat modeling, and security architecture reviews, with strong communication to both technical and business stakeholders.

Qualifications

• 5+ years in information security with strong app security depth.
• Experience embedding security into CI/CD pipelines.
• Proven ability to partner with software teams to remediate vulnerabilities.
• Experience performing threat modeling, security architecture reviews, and risk assessments.

Responsibilities

• Partner with development teams to identify, assess, prioritize, and remediate app security vulnerabilities.
• Integrate security controls across CI/CD pipelines and the software development lifecycle.
• Perform threat modeling and security architecture reviews to identify risks and controls.
• Review applications and code from a security perspective to guide secure design.
• Translate security findings into practical recommendations for technical and business stakeholders.
• Collaborate to strengthen secure development practices and embed security into engineering workflows.

Skills

App security

DevSecOps

Threat modeling

Security reviews

Job description

Epicor Software Corp is seeking an IT Security Engineer to embed security throughout software design, development, and delivery. You will partner with development teams to strengthen application security, identify and remediate vulnerabilities, and support DevSecOps practices in the SDLC.

The role requires hands-on app security work, threat modeling, and security architecture reviews, with strong communication to both technical and business stakeholders.