Senior AppSec Engineer - Remote Cloud Security

Carnival Corporation; Lorida (FL); Remote; USD 110,000 - 150,000; Full time

Benefits offered by this job

Annual cash bonus program

Equity incentive plan

Medical, dental and vision plans

Employee Assistance Program

Term life insurance and disability

Job summary

Carnival Corporation seeks an Application Security Engineer to implement and operate security controls in a cloud-based environment for its global brands. You will develop scripts and APIs to automate governance, and build cloud infrastructure and Kubernetes clusters using IaC to support security services.

Responsibilities include security reviews, vulnerability testing with scanners, and collaboration with development teams.

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, Mathematics, or similar.
• Hands-on experience writing software applications (APIs, web apps, scripts).
• Experience with threat modeling and adversarial testing of software.
• Cloud-native development and operations, CI/CD pipelines, cloud compute resources, and containerization.

Responsibilities

• Implement, operate, and maintain software security capabilities for Carnival’s global brands.
• Consult with development teams to test and assess software vulnerabilities.
• Automate governance processes for application security activities.
• Develop and maintain cloud infrastructure and Kubernetes clusters (IaC).
• Perform security reviews of applications and releases against policies and standards.
• Engage across our global brands and travel to Carnival HQ as needed.

Skills

Threat modeling

Adversarial testing

APIs

Web applications

Scripting

Cloud-native development

CI/CD

Containerization

Education

Bachelor's degree in Computer Science / Software Engineering / Mathematics

Tools

SAST

DAST

Kubernetes

Job description

Carnival Corporation seeks an Application Security Engineer to implement and operate security controls in a cloud-based environment for its global brands. You will develop scripts and APIs to automate governance, and build cloud infrastructure and Kubernetes clusters using IaC to support security services.

Responsibilities include security reviews, vulnerability testing with scanners, and collaboration with development teams.