Engineer, Application Security

Intercontinental Exchange Holdings, Inc. (ICE) is seeking an Application Security Engineer to help ensure ICE produces and maintains secure applications. This Jacksonville, FL (onsite) role blends practical security testing with engineering-minded guidance, supporting developers from early design through automated and hands-on validation.

What you’ll do

You will operate the Application Development Security Lifecycle, spanning design review through automated and hands-on testing. You will also help shape how security is applied across projects by maintaining and contributing to Application Development Security Policies and standards, staying current with industry trends and publications from NIST, OWASP, and SANS.

Security will be embedded early in the software process. You will work with development teams to set security requirements during the SDLC and provide security subject matter expertise for new projects and releases.

Automation and modern tooling are central to the role. You will implement, maintain, and integrate technologies that assess application security, including SAST (static code analyzers), DAST (dynamic testing), software composition scanners, Web Application Firewall (WAF) capabilities, and bug bounty programs. You will also focus on keeping developers informed on secure coding practices.

To strengthen adoption across ICE, you will build rapport with the application development community through training sessions, one-on-one education, Intranet blogs, and other learning opportunities, while communicating security findings to developers, QA teams, and management.

Qualifications

• University degree in Computer Science, Engineering, MIS, CIS, or a related discipline
• Software engineering experience with Java, C++, .NET and/or related languages
• Expertise deploying, configuring, and using SAST, DAST, and Software Composition in large environments
• Experience designing solutions that integrate transparently with the CI/CD pipeline
• Familiarity with application development in large cloud environments
• Interest in or exposure to AI and large language models (LLMs), including emerging security risks such as prompt injection (plus)

How you’ll grow (scope and seniority expectations)

• Document and publish technology guidance and repeatable processes
• Mentor peers in groups and individually
• Improve processes and introduce superior technology
• Take initiative to learn business goals, liaise with other departments, and identify ways to increase productivity in other ICE groups and offices