Software Engineer 3 - Security & DevSecOps (Hybrid)

CJ; Chicago (IL); Hybrid; USD 89,000 - 136,000; Full time

Benefits offered by this job

Hybrid work arrangements

Flexible time off

Paid holidays

Employee referral program

Annual recognition awards

Parental bonding leave

Backup care options

Job summary

CJ in Chicago is seeking a Software Engineer 3 focused on security within Engineering Experience to advance DevSecOps across CJ's codebase and infrastructure. You will read, fix, and prevent vulnerabilities, collaborating with GSO, auditors, and client security teams.

The role blends hands-on security engineering with building secure CI/CD workflows in AWS/Kubernetes, and requires 3+ years of security-focused software or infrastructure experience and a passion for secure-by-design practices.

Qualifications

• 3+ years of software or infrastructure engineering experience with hands-on security exposure.
• Bachelor's degree or equivalent experience.
• Ability to read code and infrastructure configs, not just scanner outputs.

Responsibilities

• Triage and respond to vulnerabilities identified through Wiz, Veracode, and penetration tests, driving resolution.
• Analyze infrastructure and codebases to assess real risk and exploitability.
• Operate vulnerability queue end to end: intake, prioritization, tracking, validation of fixes.
• Partner with engineers to communicate actual threats behind findings.
• Remediate findings directly when possible and drive remediation with teams.
• Integrate security checks into CI/CD pipelines (SAST/DAST).
• Contribute to security standards and coach teams.
• Verify AI-proposed fixes against code and runtime context.

Skills

Security-focused software engineering

Vulnerability management

CI/CD pipelines

AWS

Kubernetes

Code reading/fixing

GSO liaison

Education

Bachelor's degree or equivalent experience

Tools

Wiz

Veracode

Jira

AWS

Kubernetes

Terraform

GitLab CI/CD

ArgoCD

Job description

CJ in Chicago is seeking a Software Engineer 3 focused on security within Engineering Experience to advance DevSecOps across CJ's codebase and infrastructure. You will read, fix, and prevent vulnerabilities, collaborating with GSO, auditors, and client security teams.

The role blends hands-on security engineering with building secure CI/CD workflows in AWS/Kubernetes, and requires 3+ years of security-focused software or infrastructure experience and a passion for secure-by-design practices.