Senior Security Engineer

Thomson Reuters•Frisco, TX

2d•$94,900 - $176,300•Hybrid

About The Position

Thomson Reuters is establishing a dedicated security engineering capability and is seeking a Senior Security Engineer to help drive it. This role is part of the Service Management & Transformation team. The Senior Security Engineer will be responsible for securing and hardening the company's application, cloud, and infrastructure environments, which span on-premises data centers and major cloud platforms. A key aspect of the role involves improving and optimizing security processes, including patching cycles and golden-image refreshes, to increase efficiency and speed. The engineer will implement security controls across various domains such as patching, hardening, network isolation, identity management, and secrets management. The role also involves scaling AI-augmented tooling, packaging repeatable execution for junior engineers, and mentoring them. Collaboration with application and platform teams, as well as coordination across global teams, will be essential. The position requires feeding accurate security metrics into program reporting.

Requirements

5+ years of security, software, or DevSecOps engineering experience, comfortable securing and hardening across application, infrastructure, and cloud.
Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent practical experience).
Multi-cloud experience across two or more of AWS, Azure, GCP, and OCI (all four an advantage), alongside on-premises infrastructure.
A solid understanding of security principles and common vulnerabilities, with hands-on work across patching, hardening, cloud configuration, network isolation, and identity and access controls.
Hands-on experience with SAST/SCA tooling and remediating application and open-source dependency vulnerabilities, plus infrastructure patching.
A track record of improving and optimizing engineering processes, reducing cycle time in patching, releases, or security work, rather than only executing it.
Familiarity with vulnerability prioritization (CVSS/EPSS, CISA KEV) and SLA-driven burndown, plus comfort with AI-assisted tooling and reviewing its output critically.
Clear communication, some experience mentoring engineers, and strong ownership of security outcomes.

Responsibilities

Secure and harden the estate hands-on across the full stack: application and open-source dependency fixes, infrastructure patching, cloud configuration and guardrails, WAF, network isolation, and secrets and machine-identity management.
Improve and optimize how security gets done, reworking patching cycles and golden-image refreshes, cutting cycle time, and removing friction so the team moves faster.
Implement and tune security controls across operating systems, containers, CI/CD pipelines, cloud configuration, and network boundaries to defend against sophisticated adversaries and insider threats.
Scale adoption of AI-augmented SAST and SCA tooling, expanding coverage, reviewing generated pull requests, and validating fixes, prioritizing by risk in line with CISA guidance and measuring mean time to remediate, throughput, and burndown against SLA.
Package reusable patterns, tooling, and runbooks so routine work can be executed by more junior engineers, and mentor them with technical review of their fixes.
Partner with application and platform teams to land and validate changes safely, and coordinate with the wider team across regions to keep progress continuous across time zones.
Feed accurate security metrics and status into program reporting.

Benefits

Flexible hybrid working environment
Flex My Way policies
Work from anywhere for up to 8 weeks per year
Career Development and Growth opportunities
Grow My Way programming
Skills-first approach
Flexible vacation
Two company-wide Mental Health Days off
Access to the Headspace app
Retirement savings
Tuition reimbursement
Employee incentive programs
Resources for mental, physical, and financial wellbeing
Globally recognized, award-winning reputation for inclusion and belonging, flexibility, work-life balance
Two paid volunteer days off annually
Opportunities to get involved with pro-bono consulting projects and Environmental, Social, and Governance (ESG) initiatives
Market competitive health, dental, vision, disability, and life insurance programs
Competitive 401k plan with company match
Competitive vacation, sick and safe paid time off
Paid holidays (including two company mental health days off)
Parental leave
Sabbatical leave
Optional hospital, accident and sickness insurance paid 100% by the employee
Optional life and AD&D insurance paid 100% by the employee
Flexible Spending and Health Savings Accounts
Fitness reimbursement
Access to Employee Assistance Program
Group Legal Identity Theft Protection benefit paid 100% by employee
Access to 529 Plan
Commuter benefits
Adoption & Surrogacy Assistance
Access to Employee Stock Purchase Plan