Sr. Engineer, Application Security

Carnival Corporation•Miami, FL

21h•Remote

About The Position

The Sr. Application Security Engineer implements, operates, and maintains software security capabilities for Carnival’s global brands in a digital, cloud-based environment. The role implements software security controls, develops scripts and APIs to automate security governance, and develops cloud infrastructure supporting Application Security services. The engineer works virtually with development and operations teams across global brands to advance a security culture and help deliver digital experiences while safeguarding Carnival and its customers. The role assesses complex software security issues, operates infrastructure supporting global production workloads, and develops software to automate reporting and governance tasks. It contributes to enterprise software development policies and standards, automated security controls, and global security services, while guiding development teams in security best practices and collaborating across the enterprise. This is a remote position allowing full-time work from home. Regular travel to Carnival headquarters in Miami, Florida, may be required for in-office collaboration. Candidates are primarily sourced from remote hubs in Orlando, Tampa, Atlanta, Houston, and Dallas; candidates outside those areas must be located in Florida, Georgia, Texas, or North Carolina. Travel is expected to be no or very little. Work is primarily in a climate-controlled environment with minimal safety or health hazards.

Requirements

Bachelor’s degree in Computer Science, Software Engineering, Mathematics, or a similar field.
At least 5 years of professional experience.
Hands-on experience writing software applications, including APIs, web applications, and scripts.
Strong experience operating and administering common security tools such as SAST and DAST scanners.
Strong experience communicating security findings to teams and following through on remediation efforts.
Hands-on experience performing threat modeling and adversarial testing of software applications.
Hands-on experience with cloud-native application development and operations, including CI/CD pipelines, cloud compute resources, and containerization such as Docker and Kubernetes.
Ability to work independently and within a team to solve complex software security, infrastructure, and automation problems.

Responsibilities

Program, engineer, implement, and administer IT security technical controls and tools to assess vulnerabilities, misconfigurations, and incidents.
Consult with development teams to test and assess software vulnerabilities identified through security scanners and bug bounty programs.
Implement and automate governance processes and controls so application security activities are carried out effectively and easily by software development teams.
Develop and maintain cloud infrastructure and Kubernetes clusters, using techniques such as infrastructure as code, to host Application Security capabilities for brand teams.
Perform security reviews of applications and releases to ensure they meet relevant policies, standards, and guidelines.
Guide development teams in the use of security best practices.
Collaborate with a wide range of roles across the enterprise.

Benefits

Cost-effective medical, dental, and vision plans.
Employee Assistance Program and other mental health resources.
Company-paid term life insurance and disability coverage.
401(k) plan with company match.
Employee Stock Purchase Plan.
Eight company-wide holidays and two floating holidays for eligible full-time and part-time employees with benefits.
Vacation time, with accrual based on employee level and tenure.
Annual sick time for eligible employees.
Complimentary stand-by cruises, employee discounts on confirmed cruises, and special rates for family and friends.
Personal and professional learning and development resources, including tuition reimbursement.
On-site fitness center at the Miami campus.
Annual cash bonus program for non-sales roles.