Senior Application Security Engineer (DevSecOps)

Grow; Austin (TX); On-site; USD 94,000 - 151,000; Full time

Benefits offered by this job

Health and Wellness

Internal Mobility

Career Development

Inclusive Workplace

Work-Life Balance

Global Mobility

Job summary

Epicor is seeking an IT Security Engineer to embed security into the software design, development, and delivery process. You will partner with development teams to strengthen application security and remediate vulnerabilities across the SDLC.

You will support DevSecOps, perform threat modeling and security reviews, and translate risk into practical guidance for technical and business stakeholders. Strong app security expertise is essential.

Qualifications

• 5+ years of information security experience with strong app security expertise.
• Experience with DevSecOps and securing CI/CD pipelines.
• Ability to work with software teams to remediate vulnerabilities.

Responsibilities

• Partner with software development teams to identify, assess, prioritize, and remediate application security vulnerabilities.
• Integrate security practices and controls throughout CI/CD pipelines and the SDLC.
• Perform threat modeling and security architecture reviews to identify risks and recommend controls.
• Review applications, code, and solutions from a security perspective to guide secure design and implementation.
• Translate security findings into clear, practical recommendations for technical and business stakeholders.
• Collaborate with teams to strengthen secure development practices and embed security into engineering workflows.
• Apply information security fundamentals while advancing DevSecOps maturity.

Skills

Application security

DevSecOps

Threat modeling

Security architecture reviews

Risk assessments

Communication with development teams

Information security fundamentals

Job description

Epicor is seeking an IT Security Engineer to embed security into the software design, development, and delivery process. You will partner with development teams to strengthen application security and remediate vulnerabilities across the SDLC.

You will support DevSecOps, perform threat modeling and security reviews, and translate risk into practical guidance for technical and business stakeholders. Strong app security expertise is essential.