Senior Cloud App Security Engineer: Secure SDLC & CI/CD

Hyundai Autoever America; Irvine (CA); On-site; USD 103,000 - 159,000; Full time

Job summary

Hyundai AutoEver America in Irvine, CA is seeking a Senior Application Security Engineer to strengthen security across the software lifecycle. You will define Secure SDLC requirements, harden container images, and integrate automated security testing into CI/CD pipelines.

You will collaborate with Engineering and DevOps to triage vulnerabilities and ensure timely remediation. Experience with OWASP Top 10 and cloud security is highly valued.

Qualifications

• 5+ years of experience in Application Security, Product Security, or Secure Software Engineering with hands-on experience defining and implementing Secure SDLC requirements.
• Experience integrating SAST, DAST, and open-source vulnerability scanning into CI/CD pipelines
• Bachelor’s degree in Cybersecurity, Information Technology, Computer science or related field

Responsibilities

• Define, document, and maintain Secure SDLC policies, standards, and procedures covering secure design and coding expectations, testing requirements, and build, release, and deployment security controls.
• Develop, manage, and maintain a hardened cloud container image repository for application workloads; define baseline security requirements for container images.
• Define and implement automated security testing within CI/CD pipelines (SAST, DAST, open-source scanning).
• Collaborate with engineering and application teams to triage, prioritize, and remediate findings within SLAs.
• Provide guidance on secure coding practices, vulnerability remediation, and threat modeling; enable secure release decisions.

Skills

Application Security

CI/CD

Team collaboration

English communication

Education

Bachelor’s degree in Cybersecurity, Information Technology, Computer science or related field

Tools

SAST

DAST

Open-source scanning

Docker

Kubernetes

CI/CD tooling

Job description

Hyundai AutoEver America in Irvine, CA is seeking a Senior Application Security Engineer to strengthen security across the software lifecycle. You will define Secure SDLC requirements, harden container images, and integrate automated security testing into CI/CD pipelines.

You will collaborate with Engineering and DevOps to triage vulnerabilities and ensure timely remediation. Experience with OWASP Top 10 and cloud security is highly valued.