Senior Security Engineer

Confiz; Bentonville (AR); On-site; USD 117,000 - 193,000; Full time

Job summary

Confiz Limited is seeking a Senior Security Engineer to support one of our largest retail clients. The role focuses on application security, secure software development, and AI-driven security automation to scale risk reduction across the enterprise.

You will partner with engineering, product, and security teams to assess apps, identify security risks, and implement scalable solutions that strengthen security posture. Experience with AI tools is a plus.

Qualifications

• 8+ years of cybersecurity experience with hands-on assessments.
• Strong secure software development, threat modeling, and vulnerability management.
• Experience with security assessment tools and AI-enhanced solutions.
• Familiar with cloud-native architectures, APIs and modern development frameworks.

Responsibilities

• Conduct security assessments of applications across the enterprise.
• Collaborate with cross-functional teams to identify security risks.
• Develop standardized assessment frameworks and methodologies.
• Create AI tools to automate security assessments, compliance, and policy enforcement.
• Document findings and provide actionable remediation recommendations.
• Track remediation efforts and validate risk reduction.
• Stay current with emerging threats and AI-driven security innovations.
• Partner with FTEs to fast-track security systems.

Skills

Application security

Threat modeling

Vulnerability management

AI-driven security

Cloud-native architectures

Communication skills

Cross-functional collaboration

Education

Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or related field

Tools

Security assessment tools

AI tools

CI/CD security

Job description

Confiz is seeking a Senior Security Engineer to support one of our largest retail clients. This contract opportunity is ideal for a cybersecurity professional with deep expertise in application security, secure software development, and AI-driven security automation. In this role, you will partner with engineering, product, and security teams to assess internally developed and third-party applications, identify security risks, and implement scalable solutions that strengthen the organization's security posture. A key focus will be leveraging AI to automate security assessments, compliance validation, threat modeling, and policy enforcement, helping accelerate security initiatives while driving innovation across the enterprise.

Work Schedule: 9:00 am - 6:00 pm Pacific Time Zone

Responsibilities

• Conduct security assessments of internally developed and third-party applications across the enterprise.
• Collaborate with engineering, product, and vendor teams to understand application architecture and identify potential security risks.
• Develop and maintain standardized assessment frameworks and methodologies tailored to various application types and deployment models.
• Develop AI tools and techniques to automate and streamline security assessments, including compliance and policy enforcement, threat modeling, and supply chain security evaluation.
• Document findings and provide actionable recommendations to improve application security posture.
• Track remediation efforts and validate fixes to ensure risk reduction.
• Contribute to the development of secure design patterns and reusable security components.
• Stay current with emerging threats, vulnerabilities, and AI-driven security innovations.
• Goal is to develop AI automation, and work alongside FTEs to fast track security systems.

Requirements

• Bachelor’s or master’s degree in computer science, cybersecurity, or a related field or equivalent experience required.
• 8+ years of experience in cybersecurity, including hands-on assessment and remediation.
• Strong understanding of secure software development practices, threat modeling, and vulnerability management.
• Experience with security assessment tools and platforms, including AI-enhanced solutions.
• Familiarity with cloud-native architectures, APIs, and modern development frameworks.
• Excellent communication skills and ability to influence cross-functional teams.
• Certifications such as CISSP, OSCP, or CSSLP are a plus.

We have a global team of amazing individuals working on highly innovative enterprise projects & products. Our customer base includes Fortune 100 retail and CPG companies, leading store chains, fast growth fintech, and multiple Silicon Valley startups. What makes Confiz stand out is our focus on processes and culture. Confiz is ISO 9001:2015 (QMS), ISO 27001:2022 (ISMS), ISO 20000-1:2018 (ITSM) and ISO 14001:2015 (EMS) Certified. We have a vibrant culture of learning via collaboration and making workplace fun.

People who work with us work with cutting-edge technologies while contributing success to the company as well as to themselves.

To know more about Confiz, visit:https://www.linkedin.com/company/confiz/