Remote Senior App Security Engineer—Cloud & Automation

Carnival Corporation; Oregon; Hybrid; USD 140,000 - 170,000; Full time

Benefits offered by this job

Health Benefits

401(k) with company match

Paid Time Off

Holidays

Vacation time

Sick time

Employee discounts

Tuition reimbursement

On-site Fitness center

Job summary

Carnival Corporation is seeking a Sr. Application Security Engineer to implement, operate, and maintain security capabilities across its digital, cloud-based environment.

You will develop security controls, automate governance, and build cloud infrastructure to support security services for global brands. The role involves collaborating with development and operations teams to advance a security culture, manage Kubernetes-based infrastructure, and ensure compliance with enterprise policies.

Qualifications

• Hands-on experience writing software applications, including APIs, web apps, and scripts.
• Strong experience operating and administering security tools like SAST and DAST scanners.
• Experience with cloud-native application development and operations, including CI/CD pipelines, cloud compute resources, and containerization.

Responsibilities

• Implement and administer IT security controls and tools to assess vulnerabilities, misconfigurations, and incidents.
• Consult with development teams to test vulnerabilities from scanners and bug bounty programs.
• Automate governance processes so security activities are easy for software teams to perform.
• Develop and maintain cloud infrastructure and Kubernetes clusters using IaC for security services.
• Perform security reviews of applications and releases to ensure policy compliance.

Skills

SAST scanners

DAST scanners

Cloud infrastructure

Kubernetes

API development

CI/CD pipelines

Security governance automation

Education

Bachelor's Degree in CS/SE/Math

Tools

Docker

Kubernetes

Terraform

Job description

Carnival Corporation is seeking a Sr. Application Security Engineer to implement, operate, and maintain security capabilities across its digital, cloud-based environment.

You will develop security controls, automate governance, and build cloud infrastructure to support security services for global brands. The role involves collaborating with development and operations teams to advance a security culture, manage Kubernetes-based infrastructure, and ensure compliance with enterprise policies.