Remote: Senior Cloud Application Security Engineer

Carnival Corporation; Charlotte (NC); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Holidays

Vacation time

Sick time

Tuition reimbursement / learning & dev

Job summary

Carnival Corporation is seeking an Application Security Engineer to implement, operate, and maintain software security capabilities across its digital and cloud-based environment. The role involves automating governance, developing cloud infrastructure for security services, and working with global teams to uphold security standards.

The ideal candidate has hands-on experience with cloud-native development, CI/CD pipelines, security tools (SAST/DAST), and threat modeling, with a focus on

Qualifications

• Bachelor's Degree in Computer Science, Software Engineering, Mathematics, or similar.
• Hands-on experience writing software applications, including APIs, web applications, and scripts.
• Hands-on experience performing threat modeling and adversarial testing of software applications.
• Hands-on experience with cloud-native application development and operations, including CI/CD pipelines, cloud compute resources, and containerization.

Responsibilities

• Implement, operate, and maintain software security controls for Carnival’s global brands.
• Develop scripts and APIs to automate security governance.
• Develop cloud infrastructure to host Application Security services and manage Kubernetes clusters using IaC.
• Perform security reviews of applications and releases to ensure compliance with policies and standards.

Skills

Software security fundamentals

Cloud infrastructure

Education

Bachelor's Degree in Computer Science, Software Engineering, Mathematics, or similar

Tools

SAST scanners

DAST scanners

Kubernetes

Infrastructure as Code (IaC)

Job description

Carnival Corporation is seeking an Application Security Engineer to implement, operate, and maintain software security capabilities across its digital and cloud-based environment. The role involves automating governance, developing cloud infrastructure for security services, and working with global teams to uphold security standards.

The ideal candidate has hands-on experience with cloud-native development, CI/CD pipelines, security tools (SAST/DAST), and threat modeling, with a focus on