Remote Senior App Security Engineer

Carnival Corporation; Clayton (NC); Remote; USD 130,000 - 190,000; Full time

Benefits offered by this job

Health Benefits

401(k) plan with company match

Employee Stock Purchase Plan

Paid Time Off

Cruise discounts and travel perks

Job summary

Carnival Corporation is seeking a Sr. Application Security Engineer for a remote role supporting its global brands from a cloud-based environment.

You will implement security controls, automate governance, and develop cloud infrastructure to enable secure features and experiences for guests across Carnival's brands. You will collaborate with development and operations teams, conduct security reviews, and drive secure software development practices using SAST/DAST tools, CI/CD pipelines, and

Qualifications

• Bachelor's degree plus 5+ years of professional experience in software security or related field.

Responsibilities

• Program, engineer, implement, and administer IT Security controls and tools to assess vulnerabilities and incidents.
• Consult with development teams to test software vulnerabilities from scanners and bug bounty programs.
• Automate governance processes to ensure application security activities are easy for software teams.
• Develop and maintain cloud infrastructure and Kubernetes clusters using IaC for security services.
• Perform security reviews of applications and releases to ensure policy compliance.

Skills

Security governance automation

Threat modeling

Cloud-native development

Infrastructure as code

API development

Education

Bachelor's Degree in CS/Engineering

Tools

SAST scanners

DAST scanners

CI/CD pipelines

Docker

Kubernetes

Job description

Carnival Corporation is seeking a Sr. Application Security Engineer for a remote role supporting its global brands from a cloud-based environment.

You will implement security controls, automate governance, and develop cloud infrastructure to enable secure features and experiences for guests across Carnival's brands. You will collaborate with development and operations teams, conduct security reviews, and drive secure software development practices using SAST/DAST tools, CI/CD pipelines, and