Sr. Engineer, Application Security

This Sr. Application Security role focuses on delivering and operating application security capabilities across Carnival’s global digital brands in a cloud-based environment.

Responsibilities

• Program, engineer, implement, and administer IT Security technical controls and tools to evaluate vulnerabilities, misconfigurations, and incidents.
• Partner with development teams to test and assess software vulnerabilities using sources such as security scanners and bug bounty programs.
• Design and automate governance processes and controls so application security activities run efficiently for software development teams.
• Build and maintain cloud infrastructure and Kubernetes clusters to host application security capabilities for consumption by brand teams.
• Use infrastructure as code (IaC) and modern techniques to support application security services.
• Conduct security reviews of applications and releases to confirm alignment with relevant policies, standards, and guidelines.

Requirements

• Bachelor’s Degree in Computer Science, Software Engineering, Mathematics, or similar; 5+ years of professional experience.
• Hands-on experience developing software applications, including APIs, web applications, and scripts.
• Strong experience operating and administering common security tools, including SAST and DAST scanners.
• Strong ability to communicate security findings to teams and drive remediation follow-through.
• Hands-on experience performing threat modeling and adversarial testing of software applications.
• Hands-on experience with cloud-native application development and operations, including CI/CD pipelines, cloud compute resources, and containerization (e.g., Docker and Kubernetes).
• Work primarily in a climate-controlled environment with minimal safety/health hazard potential.
• Ability to remain stationary at a desk and/or computer for extended periods.

Technologies

• SAST, DAST
• APIs
• Web applications
• Scripts
• Threat modeling, adversarial testing
• Kubernetes
• Infrastructure as code (IaC)
• CI/CD pipelines
• Cloud compute resources
• Containerization
• Docker

Benefits

• All non-sales roles participate in an annual cash bonus program.
• Director and above roles may also be eligible for Carnival’s discretionary equity incentive plan.
• Cost-effective medical, dental, and vision plans.
• Employee Assistance Program and other mental health resources.
• Company-paid term life insurance and disability coverage.
• 401(k) plan with company match.
• Employee Stock Purchase plan.
• Paid Time Off: 8 company-wide holidays plus 2 additional floating holidays.
• Vacation Time: 14 days/year for full-time manager and below; 19 days/year for director and above.
• Sick Time: 80 hours per year for full-time employees.
• Complementary stand-by cruises, employee discounts on confirmed cruises, plus special rates for family and friends.
• Personal and professional learning and development resources, including tuition reimbursement.
• On-site fitness center at the Miami campus.

Travel

• No or very little travel likely.

Remote

• Classified as “remote,” allowing employees to work full-time from home.
• May require regular travel to Carnival headquarters in Miami, FL for in-office collaboration.
• Sourcing is primarily done in remote hubs of Orlando, Tampa, Atlanta, Houston, and Dallas.
• If the search extends beyond those areas, candidates must be located in: FL, GA, TX, or NC.