Sr. Engineer, Application Security

Carnival Corporation•Miami, FL

12d•Remote

About The Position

The Sr. Application Security Engineer implements, operates, and maintains software security capabilities for Carnival’s global brands in a digital, cloud-based environment. The role implements software security controls, develops scripts and APIs to automate security governance, and develops cloud infrastructure to support Application Security services. Working virtually with development and operations teams across global brands, the engineer helps advance a security culture that enables the delivery of guest-focused digital features while safeguarding Carnival and customer interests. The position assesses complex software security issues, operates infrastructure serving global production workloads, and develops software to automate reporting and governance. It contributes to enterprise software development policies and standards, automated security controls, and global security-service infrastructure. The engineer works independently and with teams, guides developers in security best practices, and collaborates across the enterprise. This is a remote role that allows full-time work from home. It may require regular travel to Carnival headquarters in Miami, Florida, for in-office collaboration. Candidate sourcing is primarily focused on Carnival’s remote hubs in Orlando, Tampa, Atlanta, Houston, and Dallas; if the search extends beyond those areas, candidates must be located in Florida, Georgia, Texas, or North Carolina. Travel is expected to be none or very limited. The work is primarily in a climate-controlled environment with minimal safety or health hazards, and requires remaining stationary at a desk or computer for extended periods.

Requirements

Bachelor’s degree in Computer Science, Software Engineering, Mathematics, or a similar field.
At least 5 years of professional experience.
Hands-on experience writing software applications, including APIs, web applications, and scripts.
Strong experience operating and administering common security tools such as SAST and DAST scanners.
Strong experience communicating security findings to teams and following through on remediation efforts.
Hands-on experience performing threat modeling and adversarial testing of software applications.
Hands-on experience with cloud-native application development and operations, including CI/CD pipelines, cloud compute resources, and containerization such as Docker and Kubernetes.
Ability to work independently and as part of a team to solve complex software security and infrastructure problems.

Responsibilities

Program, engineer, implement, and administer IT security technical controls and tools to assess vulnerabilities, misconfigurations, and incidents.
Consult with development teams to test and assess software vulnerabilities identified by security scanners, bug bounty programs, and other sources.
Implement and automate governance processes and controls so application security activities are completed effectively and easily by software development teams.
Develop and maintain cloud infrastructure and Kubernetes clusters, using techniques such as infrastructure as code, to host Application Security capabilities for brand teams.
Perform security reviews of applications and releases to ensure they meet relevant policies, standards, and guidelines.
Guide development teams in applying security best practices and collaborate with stakeholders across the enterprise.
Communicate security findings to teams and follow through on remediation efforts.

Benefits

Cost-effective medical, dental, and vision plans.
Employee Assistance Program and other mental health resources.
Company-paid term life insurance and disability coverage.
401(k) plan with company match.
Employee Stock Purchase plan.
Company-wide holidays and floating holidays for eligible employees.
Paid vacation and sick time, with amounts based on employee level and employment status.
Complementary stand-by cruises and employee discounts on confirmed cruises.
Special rates for family and friends.
Personal and professional learning and development resources, including tuition reimbursement.
On-site fitness center at the Miami campus.
Annual cash bonus program for non-sales roles.