Senior Application Security Engineer

Our Story
Unum Technology Centre in Carlow serves as a strategic software development and IT services centre supporting Unum, a leading provider of income protection in the US. Our team of IT professionals build solutions and critical business applications to digitally transform the way we do business.

We are seeking a Senior Application Security Engineer to help embed security across the Software Development Lifecycle and strengthen our application and cloud security practices. This is a senior hands-on role partnering with engineering, architecture and platform teams to build secure-by-design solutions, integrate security into CI/CD pipelines, lead threat modelling and vulnerability remediation, and develop security capability across teams in Ireland and the US.

• Embed secure-by-design and DevSecOps practices throughout the SDLC, working closely with engineering, architecture and platform teams.
• Design and implement security controls, automation and guardrails within CI/CD pipelines.
• Lead threat modelling, application security reviews and vulnerability remediation across applications and platforms.
• Identify and assess vulnerabilities using SAST, DAST, SCA, penetration testing and manual code review.
• Build reusable security frameworks, libraries, SDKs, secure templates and automation that enable development teams to adopt security controls effectively.
• Strengthen cloud, container and infrastructure security across environments including AWS, Docker, Kubernetes and Infrastructure as Code.
• Improve API security using technologies and standards such as OAuth 2.0, OpenID Connect, SAML and API gateways including MuleSoft.
• Develop automation for vulnerability triage, remediation and security reporting.
• Partner with Security Champions and engineering teams to establish secure coding standards, guidance and best practices.
• Mentor engineers and deliver security workshops, training and technical guidance across teams.
• Support security incident response, remediation and relevant compliance initiatives.
• Help define security metrics and drive measurable improvements in application security maturity.

• 5+ years' experience in application security, software engineering or a related technical security role.
• Strong development experience in at least one language such as Java, C#, Python or JavaScript.
• Hands-on experience with application security testing technologies including SAST, DAST, SCA and Infrastructure as Code scanning.
• Strong understanding of secure software development, DevSecOps and CI/CD environments such as GitHub Actions, Jenkins or GitLab CI.
• Experience securing cloud-native applications and environments, ideally AWS, including Docker and Kubernetes.
• Strong knowledge of API security, authentication and authorisation standards.
• Experience with threat modelling, vulnerability management and common application security frameworks including OWASP Top 10, ASVS, CVSS, MITRE ATT&CK and STRIDE.
• Ability to build scripts, automation or internal tooling to scale security practices across engineering teams.
• Knowledge of software supply chain security, secure package/artifact management and container registries.
• Strong analytical, problem-solving and communication skills, with the ability to influence technical and non-technical stakeholders.
• Experience mentoring or enabling engineers in secure development practices.

#Hybrid

What We Offer
Our size and successful history in Carlow means we can offer you exceptional development and progression, supported by continual learning programs, IT Certifications & third level tuition reimbursement. We offer work-life-balance with flexible working arrangements (including hybrid) and initiatives in support of your well-being. Our attractive range of benefits and reward initiatives includes competitive compensation, 25 days annual leave, paid health insurance, pension scheme, annual performance-based bonus, paid maternity/paternity/adoptive leave, reward programs, and an opportunity to engage with charity and community activities.

Company: