Remote Senior AppSec Engineer - Cloud & Automation

Carnival Corporation; Tallahassee (FL); À distance; USD 120 000 - 160 000; Plein temps

Avantages offerts par ce poste

Annual cash bonus

Equity incentive plan

Medical, dental and vision plans

Employee Assistance Program

Employee Stock Purchase plan

Holidays and paid time off

Tuition reimbursement

On-site fitness center (Miami campus)

Résumé du poste

Carnival Corporation is seeking an Application Security Engineer to design, implement, and operate security controls in a global, cloud-based environment. You will collaborate with development and operations teams to automate security governance and secure containerized workloads.

The role emphasizes threat modeling, CI/CD security, and using SAST/DAST scanners to safeguard guest experiences and enterprise assets. Remote-friendly with travel to headquarters as needed.

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, Mathematics, or similar; hands-on experience writing software and APIs.
• Hands-on experience threat modeling and adversarial testing of software applications.
• Hands-on cloud-native development/operations, including CI/CD, cloud compute, and containerization.

Responsabilités

• Develop and maintain security controls across Carnival’s cloud environment.
• Collaborate with development teams to test vulnerabilities from scanners and bug bounties.
• Automate governance processes to simplify security activities for developers.

Connaissances

Threat modeling

SAST/DAST

CI/CD pipelines

Cloud security

Kubernetes

Infrastructure as Code

APIs security

Formation

Bachelor's degree in CS/Software Engineering or related field

Outils

Kubernetes

CI/CD tools

Description du poste

Carnival Corporation is seeking an Application Security Engineer to design, implement, and operate security controls in a global, cloud-based environment. You will collaborate with development and operations teams to automate security governance and secure containerized workloads.

The role emphasizes threat modeling, CI/CD security, and using SAST/DAST scanners to safeguard guest experiences and enterprise assets. Remote-friendly with travel to headquarters as needed.