Hybrid Security Engineer: Cloud, App & Infra Defender

Refinitiv; Frisco, Northern (TX, KY); Hybrid; USD 71,000 - 131,000; Full time

Benefits offered by this job

Flex My Way policies

Flexible vacation

Two Mental Health Days off

Headspace app access

Retirement savings

Tuition reimbursement

Employee incentive programs

Job summary

Thomson Reuters is seeking a Security Engineer to execute security work across our application, cloud, and infrastructure estate, spanning on‑prem and major clouds. You will patch, harden, and implement controls while handling AI‑generated pull requests and running with our senior engineer and tech lead.

You will apply patches, upgrade dependencies, and coordinate testing, while supporting patch cycles and golden-image refreshes.

Qualifications

• 3+ years of experience in security engineering, software development, systems administration, or DevSecOps; bachelor's degree in CS, Info Security, or related field or equivalent experience.
• Hands-on exposure to patching, hardening, cloud configuration, network/identity controls, or scripting/automation.
• Experience with AWS, Azure, GCP, or OCI, and on-premises infrastructure.
• Understanding of security principles, CVSS/risk-based prioritization, and willingness to learn KEV/EPSS.
• Comfort with defined processes, runbooks, and taking review on complex work.
• Collaborative mindset and ownership of deliverables.
• Clear communication and attention to detail.

Responsibilities

• Execute security work across the full stack: patching, upgrading dependencies, hardening configurations, and implementing guardrails and network isolation.
• Work PRs from AI-augmented SAST and SCA tooling, coordinate regression testing with application teams.
• Support patch cycles and golden-image refreshes; remove unused software from server estates.
• Implement controls and follow runbooks, standards, and risk-based prioritization set by senior engineer and tech lead.
• Track status from assignment through verified fix and flag blockers early.
• Collaborate with application and platform teams to schedule changes and coordinate with regional teams.
• Grow skills across application, infrastructure, and cloud security with senior engineering support.

Skills

Security engineering

DevSecOps

Scripting and automation

Cloud configuration

Education

Bachelor's degree in Computer Science or Information Security

Tools

SAST tooling

SCA tooling

AI tooling

Job description

Thomson Reuters is seeking a Security Engineer to execute security work across our application, cloud, and infrastructure estate, spanning on‑prem and major clouds. You will patch, harden, and implement controls while handling AI‑generated pull requests and running with our senior engineer and tech lead.

You will apply patches, upgrade dependencies, and coordinate testing, while supporting patch cycles and golden-image refreshes.