Engineer, Application Security
Cboe Global Markets4 days ago
Chicago, IL, USAMid Level
Base Salary
$103k - $133k/yr
Responsibilities
- Partner with application and platform engineering teams to improve the security of containerized services running on Kubernetes.
- Participate in secure design reviews and threat modeling for features, services, and APIs.
- Perform code-level security reviews and provide actionable remediation guidance to developers.
- Integrate and operate SAST, dependency and container image scanning, and secret detection tools in CI/CD pipelines.
- Validate and triage security findings, distinguish real risks from false positives, and prioritize remediation based on impact.
- Contribute to container image security, secure Kubernetes workload standards, secure coding practices, and service-to-service communication protections.
- Support incident response and post-incident reviews by analyzing root causes and contributing to preventative fixes.
- Develop application and Kubernetes security skills through hands-on work and mentorship.
Requirements
- At least 2 years of professional experience in software engineering, application security, or a closely related role.
- Bachelor's degree in Computer Science, Information Security, or a related field.
- Hands-on software development experience building, testing, and deploying production services and modifying existing codebases.
- Experience building and running Docker/OCI containers, including understanding container images, layers, and runtime behavior.
- Familiarity with Kubernetes primitives including pods, deployments, services, ingress, RBAC, namespaces, and service accounts.
- Working knowledge of web and API vulnerabilities such as authentication and authorization issues, injection, and SSRF, along with secure coding practices.
- Proficiency in at least one backend programming language such as Go, Java, C#, Python, or Node.js.
- Experience with modern CI/CD workflows and Git-based development.
- Exposure to application security tooling such as SAST, dependency or container image scanning, or secret scanning tools.
- Bachelor's degree is also listed as preferred.
Benefits
- Competitive salary and incentive compensation packages, with potential upside for overachievement.
- Generous paid time off, including vacation, personal days, sick days, and annual community service days.
- Health, dental, and vision benefits, including telemedicine and mental health services.
- 401(k) match of up to 8% immediately upon hire at a 2:1 matching rate.
- Discounted Employee Stock Purchase Plan and tax savings accounts for health, dependent, and transportation expenses.
- Employee referral bonuses and volunteer opportunities.
- Tuition assistance, education opportunities, charitable giving match, paid parental leave, and fertility benefits.
- US-based role with no visa sponsorship; candidates must already be authorized to work in the United States without current or future employer sponsorship.
About Cboe Global Markets
Cboe Global Markets operates exchanges and market infrastructure for options, equities, futures, FX, ETPs, and digital assets used by brokers, banks, and institutional and retail investors. Its revenue comes from transaction and listing fees, market data and index licensing (including VIX and SPX), and related services. Founded in 1973 and headquartered in Chicago, it runs Cboe Options and Cboe Futures exchanges as well as European trading venues.