Remote Senior Application Security Engineer: Cloud & IaC

Carnival Corporation; Georgia; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health benefits

401(k) plan with company match

Paid time off

Employee discounts on cruises

Tuition reimbursement

Job summary

Carnival Corporation is seeking a Sr. Application Security Engineer to implement and operate security controls across our cloud-based environment.

You will develop scripts, automate governance, and build cloud infrastructure and Kubernetes clusters using modern IaC practices to support security services for our global brands. The role involves collaborating with development and operations teams, applying software security best practices, and guiding teams in secure development.

Qualifications

• Bachelor's degree required with 5+ years of professional experience
• Hands-on experience writing software apps, APIs, and scripts
• Strong experience with SAST and DAST scanners
• Experience with cloud-native development and CI/CD pipelines
• Ability to automate governance and security reporting

Responsibilities

• Program, engineer, implement, and administer IT security controls and tools
• Consult with development teams to test and assess software vulnerabilities
• Automate governance processes for security activities
• Develop and maintain cloud infrastructure and Kubernetes clusters (IaC)
• Perform security reviews of applications and releases against policies and standards

Skills

Security engineering

Cloud infrastructure

Kubernetes

SAST/DAST

Automation

Policy & governance

Education

Bachelor's Degree in Computer Science/Software Engineering/Math

Tools

SAST tools

DAST scanners

CI/CD pipelines

Docker

Kubernetes

IaC (Terraform)

Job description

Carnival Corporation is seeking a Sr. Application Security Engineer to implement and operate security controls across our cloud-based environment.

You will develop scripts, automate governance, and build cloud infrastructure and Kubernetes clusters using modern IaC practices to support security services for our global brands. The role involves collaborating with development and operations teams, applying software security best practices, and guiding teams in secure development.