Security Engineer - Cloud & App Security (Hybrid)

Thomson Reuters Corporation; Frisco, Northern (TX, KY); Hybrid; USD 71,000 - 131,000; Full time

Benefits offered by this job

Hybrid Work Model

Flex My Way

Career Development

Mental Health Days

Headspace app

Tuition reimbursement

Employee incentive programs

Job summary

Thomson Reuters is seeking a Security Engineer to execute security work across our application, cloud, and infrastructure estate. You will patch, harden configurations, and implement controls while collaborating with senior engineers and regional teams.

You will work with AI-augmented SAST/SCA tooling, coordinate testing, and support patch cycles and golden-image refreshes. A bachelor’s degree and 3+ years in related roles are expected.

Qualifications

• 3+ years of experience in security engineering, software development, systems administration, or DevSecOps, with a bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent practical experience).
• Hands-on exposure to patching, hardening, cloud configuration, network or identity controls, or scripting and automation.

Responsibilities

• Execute security work across the full stack: patching, upgrading dependencies, hardening configuration, and implementing guardrails, WAF, and network isolation.
• Work PRs from AI-augmented SAST and SCA tooling, confirm fixes, and coordinate regression testing with application teams.
• Support patch cycles and golden-image refreshes, remove unused/outdated software from server estates.
• Implement controls and follow runbooks, standards, and risk-based prioritization per senior engineer and tech lead.
• Track status from assignment through verified fix and flag blockers early.
• Partner with application and platform teams to schedule and validate changes safely, across regions.
• Grow skills across application, infrastructure, and cloud security with support from senior engineers.

Skills

Security engineering

DevSecOps

Scripting & Automation

Cloud platforms

Communication

Ownership

Education

Bachelor's degree in CS/InfoSec

Tools

SAST tooling

SCA tooling

Job description

Thomson Reuters is seeking a Security Engineer to execute security work across our application, cloud, and infrastructure estate. You will patch, harden configurations, and implement controls while collaborating with senior engineers and regional teams.

You will work with AI-augmented SAST/SCA tooling, coordinate testing, and support patch cycles and golden-image refreshes. A bachelor’s degree and 3+ years in related roles are expected.