IT Security Engineer

Help build security into the way software is designed, developed, and delivered. As an IT Security Engineer, you will partner closely with development teams to strengthen application security, identify and remediate vulnerabilities, and integrate security throughout the software development lifecycle. You will be responsible for supporting DevSecOps practices, performing threat modeling and security architecture reviews, and providing practical, risk-based security recommendations. We are seeking applicants with strong application security expertise, solid information security fundamentals, and the ability to build trusted partnerships with technical teams.

• →Partner with software development teams to identify, assess, prioritize, and remediate application security vulnerabilities.
• →Integrate security practices and controls throughout continuous integration and continuous delivery pipelines and the broader software development lifecycle.
• →Perform threat modeling and security architecture reviews to identify potential risks and recommend appropriate security controls.
• →Review applications, code, and technical solutions from a security perspective, helping development teams make secure design and implementation decisions.
• →Assess security risks and translate findings into clear, practical recommendations for technical and business stakeholders.
• →Collaborate with development and technology teams to strengthen secure development practices and embed security into day-to-day engineering workflows.
• →Apply strong information security fundamentals while contributing to the continued maturity of application security and DevSecOps practices.

• →5+ years’ experience in information security, including strong hands-on depth in application security.
• →Experience with DevSecOps and integrating security into continuous integration and continuous delivery pipelines.
• →Experience working with code and partnering directly with software development teams to identify and remediate security vulnerabilities.
• →Experience performing threat modeling, security architecture reviews, and risk assessments.
• →Strong information security fundamentals, sound security judgment, and the ability to communicate recommendations clearly and build effective relationships with development teams.

• Information security certifications that demonstrate continued professional development and progression.
• Experience applying application security practices across different industries, technology environments, or software delivery models.

#LI-SK #LI-HYBRID

The salary range provided reflects the national average for this job title and does not represent compensation specific to Epicor Software Corporation. Actual compensation will vary based on experience, qualifications, and market factors relevant to the position.