Senior Application Security Engineer - Remote

Carnival Corporation; Texas; Remote; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical, dental, vision plans

Employee Assistance Program

Equity incentive plan

Tuition reimbursement

Holidays and paid time off

Vacation time 14 days/year

Sick time 80 hours/year

On-site fitness center

Job summary

Carnival Corporation is seeking an Application Security Engineer to implement, operate, and maintain security capabilities across its global brands in a cloud-based environment.

You will collaborate with development and operations teams to advance a security culture that enables feature delivery while protecting guests and customers. The role emphasizes threat modeling, cloud-native development, and automated governance across a global enterprise.

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, Mathematics, or similar.
• Hands-on experience writing software applications, including APIs, web apps.
• Hands-on experience with threat modeling and adversarial testing of software.
• Cloud-native development and operations, including CI/CD pipelines and containers.

Responsibilities

• Implement and operate software security controls across Carnival's digital platforms.
• Consult with development teams to test and assess software vulnerabilities from scanners and bug bounty programs.
• Implement and automate new governance processes to simplify security tasks for developers.
• Develop cloud infrastructure and Kubernetes clusters using IaC to host Application Security capabilities.
• Perform security reviews of applications and releases to ensure policy compliance.
• Scope: The role impacts the enterprise globally, on shore and across the fleet.

Skills

Software security

Cloud infrastructure

Threat modeling

Adversarial testing

CI/CD pipelines

Education

Bachelor's degree in Computer Science / Software Engineering / Mathematics

Tools

SAST scanners

DAST scanners

Kubernetes

CI/CD tooling

Job description

Carnival Corporation is seeking an Application Security Engineer to implement, operate, and maintain security capabilities across its global brands in a cloud-based environment.

You will collaborate with development and operations teams to advance a security culture that enables feature delivery while protecting guests and customers. The role emphasizes threat modeling, cloud-native development, and automated governance across a global enterprise.