Senior Application Security Architect Kubernetes & Cloud

Cedar Cares, Inc; Chicago (IL); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical Coverage

401K or Pension with Company Match

Employee Stock Purchase Plan (ESPP)

Job summary

Cedar Cares, Inc is seeking a Principal Application Security Engineer to lead technical security initiatives and embed scalable security across their engineering ecosystem. This role involves ensuring secure architecture reviews, defining standards for application and API security, and driving best practices in cloud and container security.

The ideal candidate will have over 12 years of relevant experience in application security, demonstrate strong technical leadership, and have a comprehensive understanding of security in hybrid environments.

Qualifications

• 12+ years of experience in application security, product security, or software engineering.
• Direct experience writing and delivering production software.
• Proven ability to read, write, and review production-grade code.

Responsibilities

• Drive implementation of security controls throughout the software development lifecycle.
• Own secure architecture reviews and threat modeling for new systems.
• Develop and champion secure coding guidance and reusable security patterns.

Skills

Application Security

API Security

Kubernetes Security

DevSecOps

Coding in modern backend languages

Education

Bachelor's degree in Computer Science or Information Security

Tools

DevSecOps tooling (SAST, SCA)

Kubernetes

Job description

Cedar Cares, Inc is seeking a Principal Application Security Engineer to lead technical security initiatives and embed scalable security across their engineering ecosystem. This role involves ensuring secure architecture reviews, defining standards for application and API security, and driving best practices in cloud and container security.

The ideal candidate will have over 12 years of relevant experience in application security, demonstrate strong technical leadership, and have a comprehensive understanding of security in hybrid environments.