Application Security Engineer/Developer

Marsh McLennan•Louisville, NY

18h•Hybrid

About The Position

The Application Security Engineer/Developer will act as a security advisor to various teams across Marsh. You will also develop code samples and prototypes. We will count on you to serve as a security advisor to various teams across Marsh. Review projects for security weaknesses, risks, and vulnerabilities. Stay at the forefront of new security controls, technology trends, and emerging threats. Create or update application security best practices and develop code samples, prototypes, and tools to enhance the depth of security reviews. Collaborate with various Marsh technology organizations. Quickly “dive” into new projects to provide security expertise and support.

Requirements

Passion for Information Security and problem solving.
Experience with microservices, Kubernetes, and cloud technologies.
Proficiency in building and using APIs, scripts, and applications, preferably in Python.
Strong understanding of authentication methods, protocols, and Application Security fundamentals.
Experience with Security by Design frameworks, Threat Modeling, and Secure SDLC.
Good understanding of cryptography, encryption and digital signature

Nice To Haves

Experience in securing LLM-based applications and AI agents, including RAGs.
Knowledge of Federation, SAML, and OAuth protocols.
Ability to quickly absorb new technologies and write position papers

Responsibilities

Serve as a security advisor to various teams across Marsh.
Review projects for security weaknesses, risks, and vulnerabilities.
Stay at the forefront of new security controls, technology trends, and emerging threats.
Create or update application security best practices and develop code samples, prototypes, and tools to enhance the depth of security reviews.
Collaborate with various Marsh technology organizations.
Quickly “dive” into new projects to provide security expertise and support.