Senior Application Security Engineer - Remote & Cloud

Carnival Corporation; North Carolina; Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

Health, dental, vision plans

401(k) with company match

Employee stock purchase plan

Paid time off (holidays, vacation, and

On-site fitness center

Job summary

Carnival Corporation seeks a Sr. Application Security Engineer to implement, operate, and maintain software security capabilities across our digital, cloud-based environment.

You will develop scripts and APIs to automate governance, build IaC-driven cloud infrastructure, and secure applications for global brand teams. You will work with development and operations teams worldwide, applying SAST/DAST tooling, CI/CD pipelines, and containerization (Docker, Kubernetes), while guiding others on

Qualifications

• Hands-on software development including APIs, web apps, and scripts.
• Strong experience with SAST and DAST scanners.
• Experience with CI/CD, cloud compute, and Kubernetes.

Responsibilities

• Program, engineer, and administer IT security controls.
• Consult with development teams to test vulnerabilities.
• Automate governance processes for application security.
• Develop cloud infrastructure and Kubernetes clusters with IaC.
• Perform security reviews of applications and releases.

Skills

Security governance

Threat modeling

Cloud-native development

Leadership

Problem solving

Education

Bachelor's Degree in Computer Science, Software Engineering, Mathematics, or similar

Tools

SAST scanners

DAST scanners

CI/CD pipelines

Docker

Kubernetes

Job description

Carnival Corporation seeks a Sr. Application Security Engineer to implement, operate, and maintain software security capabilities across our digital, cloud-based environment.

You will develop scripts and APIs to automate governance, build IaC-driven cloud infrastructure, and secure applications for global brand teams. You will work with development and operations teams worldwide, applying SAST/DAST tooling, CI/CD pipelines, and containerization (Docker, Kubernetes), while guiding others on