Hybrid Security Engineer: Cloud, App & Infra Defender

Thomson Reuters; Frisco (TX); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Hybrid work model

Flex My Way

Two mental health days

Tuition reimbursement

Job summary

Thomson Reuters is expanding its Security Engineering capability, building hands-on security work across application, cloud, and infrastructure estates. You will patch, harden, implement controls, and handle PRs from AI tooling under senior guidance.

The role focuses on collaboration with multiple teams, risk-based prioritization, and growing expertise in application, infrastructure, and cloud security within a hybrid work model.

Qualifications

• 3+ years of experience in security engineering, software development, systems administration, or DevSecOps
• Bachelor's degree in Computer Science, Information Security, or a related field
• Hands-on exposure to patching, hardening, cloud configuration, network/identity controls, or scripting

Responsibilities

• Execute security work across the full stack: apply patches, upgrade dependencies, harden cloud and OS configuration, implement guardrails, WAF, and network isolation changes.
• Work PRs from AI-augmented SAST and SCA tooling, coordinate regression testing with application teams.
• Support patch cycles and golden-image refreshes, remove unused and outdated software from servers.
• Follow runbooks and risk-based prioritization per guidance from senior engineer and technical lead.
• Track status from assignment to verified fix and flag blockers early.
• Collaborate with application and platform teams to schedule changes and coordinate across regions.

Job description

Thomson Reuters is expanding its Security Engineering capability, building hands-on security work across application, cloud, and infrastructure estates. You will patch, harden, implement controls, and handle PRs from AI tooling under senior guidance.

The role focuses on collaboration with multiple teams, risk-based prioritization, and growing expertise in application, infrastructure, and cloud security within a hybrid work model.