Senior Software Engineer III - Security (Hybrid)

CJ; Santa Barbara (CA); Hybrid; USD 89,000 - 136,000; Full time

Benefits offered by this job

401K matching

Wellness program

Medical coverage

Dental coverage

Vision coverage

Flexible time off

Company-sponsored events

Employee referral program

Annual recognition awards

Hybrid work arrangements

Parental leave

Backup care

Employee discount

International SOS program

Business Resource Groups

Job summary

CJ is seeking a Software Engineer 3 focused on security within Engineering Experience to advance DevOps toward DevSecOps. You’ll identify and close vulnerabilities across CJ’s code and infrastructure, serving as a bridge between engineering and Global Security Office, auditors, and clients on security topics.

You’ll read and fix code when needed, not just file tickets. You’ll integrate security checks into CI/CD pipelines, drive remediation, and contribute to security standards while

Qualifications

• 3+ years of software or infrastructure engineering experience, with hands-on exposure to application or infrastructure security.
• Bachelor's degree or equivalent experience
• Can read code and infrastructure config, not just interpret scanner output
• Understands common vulnerability classes and how to reason about exploitability and impact
• Enough AWS/Kubernetes fluency to have credible technical conversations with the teams that operate them
• Comfortable translating technical findings for non-security stakeholders and driving fixes through influence rather than authority

Responsibilities

• Triage and respond to vulnerabilities identified through tools such as Wiz, Veracode, and penetration tests, and help drive them to resolution
• Analyze infrastructure and codebases to produce evidence-backed answers about real risk - exploitability, reachability, and impact - rather than relaying scanner severity alone
• Help operate the vulnerability queue end to end: intake, prioritization, tracking, and validation of fixes
• Partner with engineers to articulate the actual threat behind a code or infrastructure finding
• Remediate findings directly when you have the context and drive remediation through partnership where you don't
• Integrate security checks (SAST/DAST) into GitLab CI/CD pipelines so issues are caught at build and merge-request time, not only in point-in-time scans
• Contribute to security standards and best practices, and coach teams through adopting them
• Help verify AI-proposed fixes and risk assessments against the actual code, config, and runtime context before they're accepted

Skills

Application security

Security tooling

CI/CD pipelines

AWS/Kubernetes

Code reading

Education

Bachelor's degree or equivalent

Tools

Wiz

Veracode

Jira

GitLab CI/CD

Terraform

Kubernetes

AWS

Job description

CJ is seeking a Software Engineer 3 focused on security within Engineering Experience to advance DevOps toward DevSecOps. You’ll identify and close vulnerabilities across CJ’s code and infrastructure, serving as a bridge between engineering and Global Security Office, auditors, and clients on security topics.

You’ll read and fix code when needed, not just file tickets. You’ll integrate security checks into CI/CD pipelines, drive remediation, and contribute to security standards while