Remote Application Security Engineer - Cloud & Automation

Carnival Corporation; Florida; Remote; USD 140,000 - 180,000; Full time

Benefits offered by this job

Annual cash bonus

Employee Stock Purchase plan

Medical, dental and vision plans

Employee Assistance Program

Job summary

Carnival Corporation is seeking an Application Security Engineer to implement, operate, and maintain security capabilities in a cloud-based environment across its global brands. The role involves automating governance, developing cloud infrastructure with IaC, and conducting security reviews of applications and releases to align with policies.

The ideal candidate has hands-on software security experience, cloud-native development, and familiarity with SAST/DAST tools.

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, Mathematics, or similar.
• Hands-on experience writing software applications, including APIs, web apps, and scripts.
• Experience with threat modeling and adversarial testing of software applications.
• Hands-on experience with cloud-native development and operations, including CI/CD, cloud compute resources, and containerization.

Responsibilities

• Implement and maintain software security controls and governance automation.
• Consult with development teams to test vulnerabilities from scanners and bug bounty programs.
• Automate governance processes to ensure security activities are easy for developers.
• Develop and maintain cloud infrastructure and Kubernetes clusters using IaC techniques.
• Perform security reviews of applications and releases to meet policies and standards.

Skills

Software security

Cloud infrastructure

Threat modeling

Adversarial testing

SAST

DAST

CI/CD pipelines

Automation scripting

Education

Bachelor's degree in CS/SE/Math

Tools

Kubernetes

Terraform

CloudFormation

Job description

Carnival Corporation is seeking an Application Security Engineer to implement, operate, and maintain security capabilities in a cloud-based environment across its global brands. The role involves automating governance, developing cloud infrastructure with IaC, and conducting security reviews of applications and releases to align with policies.

The ideal candidate has hands-on software security experience, cloud-native development, and familiarity with SAST/DAST tools.