Senior Application Security Engineer & Architect

Cboe Global Markets, Inc.; Chicago (IL); Hybrid; USD 164,000 - 212,000; Full time

Benefits offered by this job

Medical Coverage

Prescription Drug Coverage

Dental Coverage

Vision Coverage

401K or Pension Company Match

Spending Accounts

Life and AD&D Insurance

Retirement Savings Plan

Employee Stock Purchase Plan (ESPP)

Voluntary & Additional Benefits

Paid Time Off

Job summary

Cboe Global Markets, Inc. is seeking a Principal Application Security Engineer to provide senior technical leadership and end‑to‑end ownership for embedding pragmatic, scalable security across our hybrid engineering ecosystem.

You will collaborate with engineering teams to define secure patterns for Kubernetes trust boundaries, API security, and secure SDLC practices. The role demands deep hands‑on expertise, systems thinking, and the ability to influence security and engineering practices at

Qualifications

• 12+ years of experience in application security, product security, or software engineering.
• Experience directly writing and delivering production software as a software engineer.
• Bachelor's degree in Computer Science, Information Security, or related field preferred.
• Relevant certifications preferred (e.g., CSSLP, CKS, OSCP, AWS/Azure Security Specialty).
• Proven ability to read, write, and review production‑grade code in at least one modern backend language (e.g., C++, Go, Java, C#, Python, Node.js).
• Strong working knowledge of Kubernetes security primitives (RBAC, namespaces, service accounts, pod security) and container build practices.
• Hands‑on experience integrating DevSecOps tooling (SAST, SCA, secret scanning) into CI/CD pipelines.
• Experience securing hybrid environments with workloads in public cloud and on‑prem Kubernetes.

Responsibilities

• Own secure architecture reviews and threat modelling for new systems and major changes, establishing direction for Kubernetes trust boundaries, secure service‑to‑service communication, and API models.
• Define, mature, and drive adoption of application and API security standards, including authentication/authorization, input validation, and mitigations for common vulnerabilities.
• Provide principal‑level guidance for high‑risk code and design changes, driving durable remediation approaches.
• Act as a senior technical partner to engineering leadership, influencing roadmaps and secure‑by‑default design patterns across the organization.

Skills

Backend languages

Leadership

Security architecture

Production software development

Kubernetes security

DevSecOps tooling

Hybrid Cloud security

Education

Bachelor's degree in Computer Science, Information Security, or related field

CSSLP

CKS

OSCP

AWS/Azure Security Specialty

Tools

SAST

SCA

Secret scanning

IaC scanning

Job description

Cboe Global Markets, Inc. is seeking a Principal Application Security Engineer to provide senior technical leadership and end‑to‑end ownership for embedding pragmatic, scalable security across our hybrid engineering ecosystem.

You will collaborate with engineering teams to define secure patterns for Kubernetes trust boundaries, API security, and secure SDLC practices. The role demands deep hands‑on expertise, systems thinking, and the ability to influence security and engineering practices at