Hybrid Security Engineer: Cloud & Apps

Thomson Reuters; Eagan (MN); Hybrid; USD 71,000 - 131,000; Full time

Benefits offered by this job

Life Insurance

Parental Leave

Paid Time Off

Paid Holidays

Tuition Reimbursement

401(k)

Job summary

Thomson Reuters is seeking a Security Engineer to secure a global estate across applications, cloud, and infrastructure. You will patch, harden configurations, implement guardrails, and address AI-generated PRs within established runbooks.

The role emphasizes collaboration with cross-functional teams, on‑prem and cloud environments, and a strong ownership mindset to deliver secure, reliable software at scale.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent practical experience).
• Hands-on exposure to patching, hardening, cloud configuration, network or identity controls, or scripting and automation.
• Exposure to AWS, Azure, GCP, and OCI, and to on-premises infrastructure.
• Basic understanding of security principles and CVSS-based risk prioritization, with willingness to learn KEV/EPSS.

Responsibilities

• Execute security work across the full stack: apply patches, upgrade dependencies, harden configurations, implement guardrails and network isolation.
• Work PRs from AI-augmented SAST/SCA tooling, confirm fixes, and coordinate regression testing with application teams.
• Support patching cycles and golden-image refreshes; remove unused/outdated software from server estates.
• Follow runbooks, standards, and risk-based prioritization set by senior engineer and technical lead.
• Track status from assignment through verified fix; flag blockers early.
• Collaborate with application/platform teams to schedule and validate changes across regions.

Skills

Security engineering

Software development

Systems administration

DevSecOps

Education

Bachelor's degree in CS/InfoSec

Tools

AWS

Azure

GCP

OCI

Job description

Thomson Reuters is seeking a Security Engineer to secure a global estate across applications, cloud, and infrastructure. You will patch, harden configurations, implement guardrails, and address AI-generated PRs within established runbooks.

The role emphasizes collaboration with cross-functional teams, on‑prem and cloud environments, and a strong ownership mindset to deliver secure, reliable software at scale.