Principal AppSec Architect: Kubernetes & API Security

Cedar Cares, Inc; Chicago (IL); On-site; USD 164,000 - 212,000; Full time

Benefits offered by this job

Medical Coverage

Prescription Drug Coverage

Dental Coverage

Vision Coverage

401K or Pension Company Match

Spending Accounts

Life and AD&D Insurance

Retirement Savings Plan

Employee Stock Purchase Plan (ESPP)

Voluntary & Additional Benefits

Paid Time Off

Job summary

Cboe Global Markets is seeking a Principal Application Security Engineer to provide senior technical leadership and end-to-end ownership for embedding pragmatic, scalable security across our hybrid engineering ecosystem.

You will partner with application, platform, and infrastructure teams to define secure-by-default patterns and drive security controls across the SDLC, in both cloud and on-prem environments. This role reports to the Senior Manager, Application and Cloud Security.

Qualifications

• 12+ years of experience in application security, product security, or software engineering, including significant experience shaping architecture, setting standards, and driving security outcomes across complex production environments.
• Experience directly writing and delivering production software as a software engineer.
• Bachelor's degree in Computer Science, Information Security, or related field preferred.
• Relevant certifications preferred (e.g., CSSLP, CKS, OSCP, AWS/Azure Security Specialty)
• Proven ability to read, write, and review production-grade code in at least one modern backend language (e.g., C++, Go, Java, C#, Python, Node.js), with the judgment to guide secure engineering decisions in high-impact systems
• Strong working knowledge of Kubernetes security primitives (RBAC, namespaces, service accounts, pod security) and container build practices
• Hands-on experience integrating DevSecOps tooling (SAST, SCA, secret scanning, IaC/container scanning) into CI/CD pipelines

Responsibilities

• Own secure architecture reviews and threat modeling for new systems and major changes, establishing architectural direction for Kubernetes trust boundaries, secure service-to-service communication, and API authorization models across the environment
• Define, mature, and drive adoption of application and API security standards, including authentication and authorization patterns, input validation requirements, and mitigations for common vulnerability classes such as SSRF, injection, and access control flaws
• Provide principal-level guidance for high-risk code and design changes, resolving complex security tradeoffs and driving remediation approaches that are durable, scalable, and aligned to engineering realities
• Act as a senior technical partner to engineering leadership, influencing roadmaps, architecture decisions, and secure-by-default design patterns across the organization
• Lead security design support during incident response and post-incident follow-through, translating lessons learned into durable architectural, control, and guardrail improvements

Skills

Application security

Software architecture

Cloud security

Kubernetes security

DevSecOps tooling

Security leadership

Communication

Education

Bachelor's degree in CS/Info Security

CSSLP/CKS/OSCP/AWS-Azure Security

Tools

SAST

SCA

IaC scanning

Container scanning

Job description

Cboe Global Markets is seeking a Principal Application Security Engineer to provide senior technical leadership and end-to-end ownership for embedding pragmatic, scalable security across our hybrid engineering ecosystem.

You will partner with application, platform, and infrastructure teams to define secure-by-default patterns and drive security controls across the SDLC, in both cloud and on-prem environments. This role reports to the Senior Manager, Application and Cloud Security.