Sr. Engineer, Application Security

We are looking for a highly skilled AppSec Engineer to join our team. In this role, you will be responsible for implementing, operating, and maintaining software security capabilities for Carnival’s global brands in a digital, cloud-based environment. The role will report into the GCS organization, and the Application Security team specifically. You will work virtually with development and operations teams across our global brands to advance a security culture that empowers Carnival to produce features and digital experiences that delight our guests while safeguarding the interests of both Carnival Corporation and our customers.

Essential Functions:

• Program, engineer, implement, and administer IT Security technical controls and tools to assess vulnerabilities, misconfigurations and incidents.

• Develop scripts and APIs to enable automated reporting and self-service capabilities for teams

• Implement and automate new governance processes and controls to ensure that application security activities are being carried out and are done so easily by software development teams.

• Develop and maintain cloud infrastructure using modern techniques like infrastructure as code (IaC) to host Application Security capabilities for consumption by brand teams.

• Operate and maintain application deployments in a Kubernetes environment.

• Develop CI/CD pipelines to configure and deploy security tooling.

• Perform security reviews of applications and releases to ensure they meet relevant policies, standards, and guidelines.

• Create and distribute security reports to required business and IT units, including vulnerability reports for tracking of remediation.

• Response to escalations and other priorities as required, may require afterhours engagement as needed.

Qualifications:

• Bachelors Degree in Computer Science, Software Engineering, Mathematics, or similar.

• 5+ years of relevant experience.

Knowledge, Skills, and Abilities:

• Extensive experience in programming, engineering, and implementing IT security technical controls and tools.

• Proven ability to develop scripts and APIs for automated reporting and self-service capabilities.

• Experience in evaluating, selecting, and implementing security tools and technologies.

• Strong leadership skills in managing security-focused projects and mentoring team members.

Physical Demands: Must be able to remain in a stationary position at a desk and/or computer for extended periods of time.

Travel: Less than 25% non-shipboard travel likely

Work Conditions: Work primarily in a climate-controlled environment with minimal safety/health hazard potential.

This position is classified as “remote.”  As a remote role, it allows employees to work full-time from their home. It may also require regular travel to Carnival headquarters in Miami, FL for in-office collaboration.  Sourcing of candidates is primarily done in Carnival’s remote hubs of Orlando, Tampa, Atlanta, Houston, and Dallas.  If the search is extended past those areas, candidates must be located in one of the following U.S. states:  FL, GA, TX and NC

Offers to selected candidates will be made on a fair and equitable basis, taking into account specific job-related skills and experience.  

At Carnival, your total rewards package is much more than your base salary. All non-sales roles participate in an annual cash bonus program, while sales roles have an incentive plan. Director and above roles may also be eligible to participate in Carnival’s discretionary equity incentive plan. Plus, Carnival provides comprehensive and innovative benefits to meet your needs, including:

• Health Benefits:
  • Cost-effective medical, dental and vision plans
  • Employee Assistance Program and other mental health resources
  • Additional programs include company paid term life insurance and disability coverage 
• Financial Benefits:
  • 401(k) plan that includes a company match
  • Employee Stock Purchase plan
• Paid Time Off
  • Holidays – All full-time and part-time with benefits employees receive days off for 8 company-wide holidays, plus 2 additional floating holidays to be taken at the employee’s discretion. 
  • Vacation Time – All full-time employees at the manager and below level start with 14 days/year; director and above level start with 19 days/year.  Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 84 hours/year.  All employees gain additional vacation time with further tenure.
  • Sick Time – All full-time employees receive 80 hours of sick time each year.  Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 60 hours each year.  
• Other Benefits
  • Complementary stand-by cruises, employee discounts on confirmed cruises, plus special rates for family and friends
  • Personal and professional learning and development resources including tuition reimbursement 

#LI-Remote

#Corp

#LI-SH1