Hybrid Security Engineer — Cloud & App Security

Socket.dev; Town of Texas (WI); Hybrid; USD 71,000 - 131,000; Full time

Benefits offered by this job

Hybrid Work Model

Flex My Way policies

Career Development and Growth

Industry Competitive Benefits

Culture of inclusion and belonging

Job summary

Thomson Reuters in the United States is seeking a Security Engineer to join the Service Management & Transformation team. You will execute security work across the full stack, apply patches, harden configurations, implement guardrails, WAFs, and coordinate changes with regional teams.

You will work with AI-augmented SAST and SCA tooling, patching cycles, golden-image refreshes, and risk-based prioritization per CISA guidance.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field (or equivalent practical experience).
• Hands-on exposure to patching, hardening, cloud configuration, network or identity controls, or scripting and automation.
• Experience with AWS, Azure, GCP, or OCI and on-premises infrastructure.

Responsibilities

• Execute security work across the full stack: apply patches, upgrade application and open-source dependencies, harden cloud and operating-system configuration, and implement guardrails, WAF, and network-isolation changes.
• Work the pull requests generated by AI-augmented SAST and SCA tooling, confirm fixes hold, and coordinate regression testing with application teams.
• Support patching cycles and golden-image refreshes, and help remove unused and outdated software from server estates.
• Implement the controls and follow the runbooks, standards, and risk-based prioritization set by the senior engineer and technical lead.
• Track status accurately from assignment through verified fix, and flag blockers early.
• Partner with application and platform teams to schedule and validate changes safely, and coordinate with the wider team across regions.
• Grow your skills across application, infrastructure, and cloud security with support from senior engineers.

Skills

Patching

Hardening

Cloud configuration

Network controls

Scripting & Automation

DevSecOps

Vulnerability management

Education

Bachelor's degree in Computer Science or Information Security

Tools

AWS

Azure

GCP

OCI

Job description

Thomson Reuters in the United States is seeking a Security Engineer to join the Service Management & Transformation team. You will execute security work across the full stack, apply patches, harden configurations, implement guardrails, WAFs, and coordinate changes with regional teams.

You will work with AI-augmented SAST and SCA tooling, patching cycles, golden-image refreshes, and risk-based prioritization per CISA guidance.