EXPLORE YOUR NEXT CHAPTER
Senior Application Security Engineer
C5020 Unum Ireland Limited
Source: Headcount Labs · original listing ↗
Job data: Headcount Labs, ODbL 1.0. Job descriptions belong to their employers.
Posted yesterday
About this role
Our Story Unum Technology Centre in Carlow serves as a strategic software development and IT services centre supporting Unum, a leading provider of income protection in the US. Our team of IT professionals build solutions and critical business applications to digitally transform the way we do business. Job Summary We are seeking a Senior Application Security Engineer to help embed security across the Software Development Lifecycle and strengthen our application and cloud security practices. This is a senior hands-on role partnering with engineering, architecture and platform teams to build secure-by-design solutions, integrate security into CI/CD pipelines, lead threat modelling and vulnerability remediation, and develop security capability across teams in Ireland and the US. The Role * Embed secure-by-design and DevSecOps practices throughout the SDLC, working closely with engineering, architecture and platform teams. * Design and implement security controls, automation and guardrails within CI/CD pipelines. * Lead threat modelling, application security reviews and vulnerability remediation across applications and platforms. * Identify and assess vulnerabilities using SAST, DAST, SCA, penetration testing and manual code review. * Build reusable security frameworks, libraries, SDKs, secure templates and automation that enable development teams to adopt security controls effectively. * Strengthen cloud, container and infrastructure security across environments including AWS, Docker, Kubernetes and Infrastructure as Code. * Improve API security using technologies and standards such as OAuth 2.0, OpenID Connect, SAML and API gateways including MuleSoft. * Develop automation for vulnerability triage, remediation and security reporting. * Partner with Security Champions and engineering teams to establish secure coding standards, guidance and best practices. * Mentor engineers and deliver security workshops, training and technical guidance across teams. * Support security incident response, remediation and relevant compliance initiatives. * Help define security metrics and drive measurable improvements in application security maturity. What You Offer * 5+ years' experience in application security, software engineering or a related technical security role. * Strong development experience in at least one language such as Java, C#, Python or JavaScript. * Hands-on experience with application security testing technologies including SAST, DAST, SCA and Infrastructure as Code scanning. * Strong understanding of secure software development, DevSecOps and CI/CD environments such as GitHub Actions, Jenkins or GitLab CI. * Experience securing cloud-native applications and environments, ideally AWS, including Docker and Kubernetes. * Strong knowledge of API security, authentication and authorisation standards. * Experience with threat modelling, vulnerability management and common application security frameworks including OWASP Top 10, ASVS, CVSS, MITRE ATT&CK and STRIDE. * Ability to build scripts, automation or internal tooling to scale security practices across engineering teams. * Knowledge of software supply chain security, secure package/artifact management and container registries. * Strong analytical, problem-solving and communication skills, with the ability to influence technical and non-technical stakeholders. * Experience mentoring or enabling engineers in secure development practices. Desirable experience includes: Relevant certifications such as OSCP, CSSLP or CISSP; policy-as-code technologies such as Open Policy Agent; service meshes such as Istio; secure runtimes; security community/open-source contributions; and experience supporting security standards or regulations such as ISO 27001, SOC 2, PCI DSS, HIPAA or GDPR. ijadv LI-SF1 LI-Hybrid Hybrid What We Offer Our size and successful history in Carlow means we can offer you exceptional development and progression, supported by continual learning programs, IT Certifications & third level tuition reimbursement. We offer work-life-balance with flexible working arrangements (including hybrid) and initiatives in support of your well-being. Our attractive range of benefits and reward initiatives includes competitive compensation, 25 days annual leave, paid health insurance, pension scheme, annual performance-based bonus, paid maternity/paternity/adoptive leave, reward programs, and an opportunity to engage with charity and community activities. Company: Unum Join our talent community to receive notifications about jobs relevant to your interest. Join our [Talent Community](https://unum.wd1.myworkdayjobs.com/en-US/External/introduceYourself)! At Unum Group, we’re a Fortune 500 company and leading international provider of workplace benefits and services, helping workers and their families thrive for more than 175 years. Through our Unum and Colonial Life brands, our company offers disability, life, accident, critical illness, dental and vision insurance; leave and absence management support; and behavioral health services. Our 10,000+ employees work across operations in the US, UK and Poland, as well as our dedicated Technology Centre in Ireland. Unum Group is committed to working with and providing reasonable accommodations for any applicant with a disability. If you are disabled and need a reasonable accommodation to participate in the application or hiring process, please contact us by submitting a request [here](https://www.unum.com/lp/contact-recruiting).