Security Engineer - Hybrid Cloud & App Security

Thomson Reuters; Eagan (MN); Hybrid; USD 71,000 - 131,000; Full time

Job summary

Thomson Reuters is building a security engineering capability and seeks a Security Engineer to secure a global estate across applications, cloud, and infrastructure. You will patch, harden configurations, implement controls, and review AI-generated pull requests following established runbooks and risk-based prioritization.

You will work with senior engineers to coordinate changes, test fixes, and expand security coverage across regions while growing your expertise in cloud, on‑prem, and

Qualifications

• 3+ years of security engineering, software dev, systems admin, or DevSecOps with a CS/InfoSec degree or equivalent.
• Hands-on with patching, hardening, cloud config, network/identity controls, or scripting/automation.
• Experience with AWS, Azure, GCP, and/or OCI and on-prem infra.

Responsibilities

• Execute security work across full stack: patches, upgrades, hardening, guardrails, WAF, network isolation.
• Process AI-augmented SAST/SCA pull requests; coordinate regression testing.
• Support patch cycles and golden-image refreshes; remove unused software.
• Follow runbooks, standards, and risk-based prioritization per guidance.
• Track status from assignment to verified fix; flag blockers early.
• Collaborate with app/platform teams to schedule safe changes across regions.
• Grow skills across app, infra, and cloud security with mentor support.

Skills

Security engineering

Patching

Cloud security

Scripting

CI/CD automation

Education

Bachelor's degree in CS or related field

Tools

AWS

Azure

GCP

On-premises infrastructure

Job description

Thomson Reuters is building a security engineering capability and seeks a Security Engineer to secure a global estate across applications, cloud, and infrastructure. You will patch, harden configurations, implement controls, and review AI-generated pull requests following established runbooks and risk-based prioritization.

You will work with senior engineers to coordinate changes, test fixes, and expand security coverage across regions while growing your expertise in cloud, on‑prem, and