Software Senior Engineer

Contribute to the implementation and continuous improvement of AI-native software security practices across the Services Software Portfolio.

Work with engineering teams and Security Champions to adopt AI-assisted development, automated remediation, and secure developer workflows.

Integrate security controls into each phase of the software development lifecycle to improve consistency, reduce manual effort, and support secure delivery.

Participate in communities of practice and knowledge-sharing sessions for AI-native security engineering.

Conduct threat modeling and risk assessments to identify vulnerabilities, evaluate attack paths, and prioritize remediation.

Implement and improve vulnerability detection and triage capabilities that reduce false positives and help engineering teams address meaningful security risks.

Perform secure code reviews and guide developers in applying secure coding patterns and validating AI-generated recommendations.

Work with product and operations teams to improve security monitoring, anomaly detection, and production resilience.

Collaborate with product teams, security advisors, developers, and other stakeholders to promote practical and scalable security practices.

Evaluate emerging AI-security capabilities, contribute to proofs of concept, and help integrate proven approaches into engineering workflows.

Apply knowledge of software architectures and applications when reviewing designs, identifying risks, and recommending security improvements.

Education: Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent professional experience. A relevant industry cybersecurity certification is desirable.

Experience: Typically 5+ years of related experience in software security engineering, application security, software engineering, product security, or DevSecOps with a bachelor’s degree; 3+ years with a master’s degree; or equivalent experience.

Strong understanding of:

Software Development Lifecycle

Secure Development Lifecycle

Application Security

Threat Modeling

Vulnerability Management

Open-Source Security

Experience applying security practices in Agile or DevOps development environments.

Experience with AI-assisted development tools or modern large language model platforms is desirable.

Effective written and verbal communication skills, including the ability to explain technical security issues to developers, product managers, and non-technical stakeholders.

Ability to work independently on moderately complex assignments while collaborating effectively with globally distributed engineering and security teams.

Ability to contribute to process improvements, adoption measurements, technical documentation, and team enablement activities.

Technical Skills:

Proficiency in at least one programming language, such as Python, Java, or C++, for reviewing, developing, or integrating security-related solutions.

Practical experience with application security testing, code review, vulnerability scanning, or related security tools.

Familiarity with AI or machine-learning frameworks is desirable.

Familiarity with security tools such as Snyk, Veracode, or comparable commercial or open-source alternatives.

Knowledge of cloud platforms such as Amazon Web Services, Microsoft Azure, or Google Cloud Platform and container technologies such as Docker or Kubernetes.

Understanding of common software vulnerabilities, including the OWASP Top 10, and practical approaches for preventing or remediating them.

Soft Skills: Strong analytical, troubleshooting, and problem-solving abilities. Ability to communicate clearly, provide constructive technical guidance, work effectively in a collaborative environment, and adapt to evolving technologies and threats.