Senior Remote Application Security Engineer

Carnival Corporation & plc; Miami (FL); Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Annual bonus program

Equity incentive plan

Health benefits

401(k) plan

Paid time off

Job summary

Carnival Corporation & plc is seeking a Sr. Application Security Engineer to implement, operate, and maintain software security in a cloud-based environment for its global brands.

You will develop security controls, automate governance, and build cloud infrastructure to support Application Security services across the fleet. The role requires hands-on work with SAST/DAST scanners, cloud-native development, CI/CD, and containerization (Docker/Kubernetes).

Qualifications

• Bachelor's degree in CS or related field; 5+ years of professional experience.
• Hands-on experience writing software applications, APIs, web apps, and scripts.
• Strong experience with SAST and DAST scanners and remediation.
• Cloud-native development with CI/CD pipelines, cloud compute resources, and containerization (Docker, Kubernetes).

Responsibilities

• Program, engineer, implement, and administer IT security controls and tools to assess vulnerabilities and incidents.
• Consult with development teams to test and assess software vulnerabilities from scanners and bug bounty programs.
• Automate governance processes to ensure application security activities are easy for developers.
• Develop and maintain cloud infrastructure and Kubernetes clusters using IaC to host security capabilities.
• Perform security reviews of applications and releases to ensure policy and standards compliance.

Skills

SAST

DAST

Cloud security

Kubernetes

Infrastructure as Code

Threat modeling

CI/CD pipelines

Security automation

API security

Education

Bachelor's Degree in CS

Tools

SAST scanners

DAST scanners

Job description

Carnival Corporation & plc is seeking a Sr. Application Security Engineer to implement, operate, and maintain software security in a cloud-based environment for its global brands.

You will develop security controls, automate governance, and build cloud infrastructure to support Application Security services across the fleet. The role requires hands-on work with SAST/DAST scanners, cloud-native development, CI/CD, and containerization (Docker/Kubernetes).