Senior Application Security Engineer

Location: Carlow, Carlow, IRE

Time Type: Full time

Job Description

Our Story
Unum Technology Centre in Carlow serves as a strategic software development and IT services centre supporting Unum, a leading provider of income protection in the US. Our team of IT professionals build solutions and critical business applications to digitally transform the way we do business.

Job Summary

We are seeking a Senior Application Security Engineer to help embed security across the Software Development Lifecycle and strengthen our application and cloud security practices. This is a senior hands-on role partnering with engineering, architecture and platform teams to build secure-by-design solutions, integrate security into CI/CD pipelines, lead threat modelling and vulnerability remediation, and develop security capability across teams in Ireland and the US.

The Role

• Embed secure-by-design and DevSecOps practices throughout the SDLC, working closely with engineering, architecture and platform teams.
• Design and implement security controls, automation and guardrails within CI/CD pipelines.
• Lead threat modelling, application security reviews and vulnerability remediation across applications and platforms.
• Identify and assess vulnerabilities using SAST, DAST, SCA, penetration testing and manual code review.
• Build reusable security frameworks, libraries, SDKs, secure templates and automation that enable development teams to adopt security controls effectively.
• Strengthen cloud, container and infrastructure security across environments including AWS, Docker, Kubernetes and Infrastructure as Code.
• Improve API security using technologies and standards such as OAuth 2.0, OpenID Connect, SAML and API gateways including MuleSoft.
• Develop automation for vulnerability triage, remediation and security reporting.
• Partner with Security Champions and engineering teams to establish secure coding standards, guidance and best practices.
• Mentor engineers and deliver security workshops, training and technical guidance across teams.
• Support security incident response, remediation and relevant compliance initiatives.
• Help define security metrics and drive measurable improvements in application security maturity.

What You Offer

• 5+ years' experience in application security, software engineering or a related technical security role.
• Strong development experience in at least one language such as Java, C#, Python or JavaScript.
• Hands-on experience with application security testing technologies including SAST, DAST, SCA and Infrastructure as Code scanning.
• Strong understanding of secure software development, DevSecOps and CI/CD environments such as GitHub Actions, Jenkins or GitLab CI.
• Experience securing cloud-native applications and environments, ideally AWS, including Docker and Kubernetes.
• Strong knowledge of API security, authentication and authorisation standards.
• Experience with threat modelling, vulnerability management and common application security frameworks including OWASP Top 10, ASVS, CVSS, MITRE ATT&CK and STRIDE.
• Ability to build scripts, automation or internal tooling to scale security practices across engineering teams.
• Knowledge of software supply chain security, secure package/artifact management and container registries.
• Strong analytical, problem-solving and communication skills, with the ability to influence technical and non-technical stakeholders.
• Experience mentoring or enabling engineers in secure development practices.

Desirable experience includes: Relevant certifications such as OSCP, CSSLP or CISSP; policy-as-code technologies such as Open Policy Agent; service meshes such as Istio; secure runtimes; security community/open-source contributions; and experience supporting security standards or regulations such as ISO 27001, SOC 2, PCI DSS, HIPAA or GDPR.

#ijadv

#LI-SF1

#LI-Hybrid

#Hybrid

What We Offer
Our size and successful history in Carlow means we can offer you exceptional development and progression, supported by continual learning programs, IT Certifications & third level tuition reimbursement. We offer work-life-balance with flexible working arrangements (including hybrid) and initiatives in support of your well-being. Our attractive range of benefits and reward initiatives includes competitive compensation, 25 days annual leave, paid health insurance, pension scheme, annual performance-based bonus, paid maternity/paternity/adoptive leave, reward programs, and an opportunity to engage with charity and community activities.

Company: