Staff Application Security Engineer: Cloud-Native Security

IBM; Rochester (MN); On-site; USD 150,000 - 190,000; Full time

Job summary

IBM Software is seeking a Staff Application Security Engineer to shape security across on-prem and cloud offerings. You will lead security architecture, drive threat modeling, and guide secure-by-design practices with Engineering and Product leadership.

You'll own security automation, oversee code reviews and API testing, and push for secure CI/CD workflows while embedding AI/LLMs to improve security outcomes across our distributed platforms.

Qualifications

• 10+ years of hands-on application security in large-scale systems.
• Experience securing CI/CD pipelines and cloud-native deployments.
• Ability to lead security architecture across engineering teams.
• Experience with AI/LLMs to automate security workflows.

Responsibilities

• Partner with engineering and product teams to identify security risks early.
• Define threat modeling frameworks and lead security design reviews.
• Oversee security code reviews and API security testing.
• Drive roadmaps for security automation tooling.
• Design automation for cloud-native deployment pipelines.
• Lead research and tabletop exercises to anticipate threats.
• Deploy advanced controls to harden attack surfaces.

Skills

Security architecture

Threat modeling

Security reviews

Cloud-native

CI/CD security

Automation tooling

Go/Python/Java

Distributed systems

Security leadership

Cross-functional collaboration

Education

Master's Degree

Tools

Go

Python

Java

Job description

IBM Software is seeking a Staff Application Security Engineer to shape security across on-prem and cloud offerings. You will lead security architecture, drive threat modeling, and guide secure-by-design practices with Engineering and Product leadership.

You'll own security automation, oversee code reviews and API testing, and push for secure CI/CD workflows while embedding AI/LLMs to improve security outcomes across our distributed platforms.