Engineer, Application Security

Cedar Cares, Inc; Chicago (IL); On-site; USD 102,850 - 133,100; Full time

Benefits offered by this job

Competitive salary

Incentive compensation

Generous paid time off

Health, dental, vision benefits

2:1 401(k) match up to 8%

Employee Stock Purchase Plan

Training and education opportunities

Parental leave and fertility benefits

Volunteer opportunities

Job summary

Cboe Global Markets is seeking an Application Security Engineer to join its security team in Chicago, partnering with engineering to build secure containerized services on Kubernetes and advance application security expertise.

Responsibilities include code‑level security reviews, threat modeling, and integrating security tooling into CI/CD pipelines while guiding secure coding and deployment standards across Kubernetes workloads and APIs.

Qualifications

• 2+ years of professional experience in software engineering, application security, or a closely related role.
• Hands-on software development experience building, testing, and deploying production services.
• Experience building and running Docker/OCI containers and understanding container images, layers, and runtime behavior.
• Familiarity with Kubernetes, including deployments and basic security concepts.
• Knowledge of common web/app vulnerabilities and secure coding practices.
• Proficiency in at least one backend language (Go, Java, C#, Python, Node.js) and modern CI/CD workflows.
• Exposure to application security tooling such as SAST, SCA, or secret scanning.

Responsibilities

• Partner with engineering teams to improve security of containerized services on Kubernetes.
• Participate in secure design reviews and threat modeling for new features, services, and APIs.
• Perform code-level security reviews and provide remediation guidance.
• Integrate and operate security tooling in CI/CD pipelines (SAST, SCA, secret detection).
• Validate findings and prioritize remediation based on impact.
• Contribute to container image security practices and secure base images.
• Define and apply secure coding and deployment standards for Kubernetes workloads and services.

Skills

Go

Java

C#

Python

Node.js

CI/CD

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

Docker/OCI

Kubernetes

SAST tools

SCA tools

Secret scanning tools

Job description

Job Summary

Cboe Global Markets is a leading provider of market infrastructure and tradable products, delivering cutting‑edge trading, clearing, and investment solutions worldwide.

Location

Headquarters: Cboe HQ in the historic Old Post Office district, Chicago. The building offers modern amenities, spacious work areas, fitness center, restaurants, and easy access to public transportation.

Role Overview

Cboe’s Cybersecurity team needs an Application Security Engineer to partner with application and platform engineering teams, building secure containerized services on Kubernetes and advancing application security expertise.

Responsibilities

• Partner with engineering teams to improve security of containerized services on Kubernetes.
• Participate in secure design reviews and threat modeling for new features, services, and APIs.
• Perform code‑level security reviews and provide clear, actionable remediation guidance.
• Integrate and operate security tooling in CI/CD pipelines, including SAST, dependency and container image scanning (SCA), and secret detection.
• Validate and triage security findings, distinguishing real risk from false positives and prioritizing remediation based on impact.
• Contribute to container image security practices, including secure base image usage, dependency hygiene, and attack surface reduction.
• Assist in defining and applying secure coding and deployment standards for Kubernetes workloads, APIs, and service‑to‑service communication.
• Support incident response and post‑incident reviews to analyze root causes and contribute to preventative fixes.
• Continuously grow application and Kubernetes security skills through hands‑on work and mentorship.

Qualifications

• 2+ years of professional experience in software engineering, application security, or a closely related role.
• Bachelor’s degree in Computer Science, Information Security, or a related field.
• Hands‑on software development experience, including building, testing, and deploying production services and comfort reading and modifying existing codebases.
• Experience building and running Docker/OCI containers and understanding of container images, layers, and runtime behavior.
• Familiarity with Kubernetes, including deploying or supporting applications and working with core primitives (pods, deployments, services, ingress) and basic security concepts (RBAC, namespaces, service accounts).
• Working knowledge of common web and API vulnerabilities (authentication/authorization issues, injection, SSRF, etc.) and secure coding practices.
• Proficiency in at least one backend programming language (Go, Java, C#, Python, Node.js) and experience with modern CI/CD workflows and Git‑based development.
• Exposure to application security tooling such as SAST, dependency or container image scanning, or secret scanning tools.
• Preferred: Bachelor’s degree in related field.

Benefits and Perks

• Competitive salary and incentive compensation with upside for overachievement.
• Generous paid time off, including vacation, personal days, sick days, and annual community service days.
• Health, dental, and vision benefits with telemedicine and mental health services.
• 2:1 401(k) match up to 8% upon hire.
• Employee Stock Purchase Plan with tax savings.
• Discounted training and education opportunities.
• Paid parental leave and fertility benefits.
• Volunteer opportunities and charitable giving match.

Salary

$102,850 – $133,100 annually, with additional incentive and equity potential.

Equal Employment Opportunity

Cboe Global Markets is an Equal Opportunity Employer and does not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, or veteran status.

Visa Sponsorship

This position is not eligible for visa sponsorship. Candidates must be legally authorized to work in the United States without the need for employer sponsorship now or in the future.