{"id":3848721,"url":"https://alion.io/job/amtrust-financial-security-engineer-applications","title":"Security Engineer, Applications","company":{"id":1953579,"name":"AmTrust Financial","domain":"amtrustfinancial.com","url":"https://alion.io/company/amtrustfinancial","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cleveland, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Agentic Workflows","optional":true},{"name":"AI Agents","optional":true},{"name":"Azure","optional":true},{"name":"Burp Suite","optional":true},{"name":"Kubernetes","optional":true}],"status":"live","first_seen_at":"2026-11-06T01:51:04Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-06T10:52:50Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Overview\nThe Security Engineer, Applications is a key member of the Security Assurance team responsible for identifying, assessing, and reducing security risk across applications, APIs, cloud-native platforms, and AI-enabled solutions. This role partners closely with software engineering teams to integrate security throughout the Secure Software Development Lifecycle (SSDLC) through secure design, code review, penetration testing, threat modeling, automated security controls, and risk-based vulnerability management.\nThis position combines hands-on technical expertise with strategic influence, helping development teams build secure software while advancing scalable security practices, tooling, and standards across the organization.\nResponsibilities\nLead application security assessments, secure code reviews, penetration testing, and threat modeling to identify and mitigate application and API security risks.\nDevelop and mature application security capabilities across the SSDLC through secure design reviews, automated testing, developer enablement, and scalable security controls.\nPartner with software engineering teams to integrate secure coding practices, vulnerability management, and security requirements into development and CI/CD workflows.\nManage and optimize application security tooling, including SAST, SCA, DAST, secrets scanning, repository protections, and related secure development technologies.\nAdvance the secure adoption of cloud-native and AI-enabled solutions through security guidance, architecture reviews, risk assessments, and practical security standards.\nServe as a trusted advisor to technical and business stakeholders by communicating risks, remediation priorities, and security best practices.\nQualifications\nBachelor’s degree in Computer Science, Information Technology, Computer Engineering, Cybersecurity, or a related field, or equivalent relevant professional experience. \n5+ years of experience in application security, product security, DevSecOps, penetration testing, or security engineering.\nDemonstrated experience working directly with software engineering teams to integrate security into modern software development processes and delivery pipelines.\nStrong expertise in secure coding practices, source code analysis, vulnerability identification, threat modeling, and application security testing.\nHands-on experience implementing and operating application security controls including SAST, DAST, SCA, secrets scanning, and CI/CD security integrations.\nDeep understanding of web application, API, and cloud-native security principles.\nPreferred Qualifications\nExperience securing Azure cloud and cloud-native application environments, including Azure services, containers, IaC, software supply-chain security, and CI/CD security controls.\nHands-on experience securing AI-enabled applications, copilots, AI agents, and agentic workflows, including risks involving data exposure, trust boundaries, identity and access management, prompt manipulation, and tool invocation.\nExperience with Kubernetes and cloud-native security technologies, including container security, workload protection, admission controls, service meshes, and cloud-native security tooling.\nExperience automating and scaling security operations through scripting, security tooling, metrics, reporting, and governance in regulated or business-critical environments.\nRelevant application security, secure software development, penetration testing, or cloud security certifications are preferred, such as:CSSLP (Certified Secure Software Lifecycle Professional) \nGIAC Certified Web Application Defender (GWEB) or Web Application Penetration Tester (GWAPT) \nOffSec Certified Professional (OSCP) or OffSec Web Expert (OSWE)\nBurp Suite Certified Practitioner (BSCP)\nCertified Kubernetes Security Specialist (CKS)\n\nWhat We Offer\nAmTrust Financial Services offers a competitive compensation package and excellent career advancement opportunities. Our benefits include: Medical & Dental Plans, Life Insurance, including eligible spouses & children, Health Care Flexible Spending, Dependent Care, 401k Savings Plans, Paid Time Off.\nAmTrust strives to create a diverse and inclusive culture where thoughts and ideas of all employees are appreciated and respected. This concept encompasses but is not limited to human differences with regard to race, ethnicity, gender, sexual orientation, culture, religion or disabilities.\nAmTrust values excellence and recognizes that by embracing the diverse backgrounds, skills, and perspectives of its workforce, it will sustain a competitive advantage and remain an employer of choice. Diversity is a business imperative, enabling us to attract, retain and develop the best talent available. We see diversity as more than just policies and practices. It is an integral part of who we are as a company, how we operate and how we see our future.","description_format":"text","description_chars":4897,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Life insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Property & Casualty Insurance"],"lifecycle":[{"event":"open","at":"2026-11-06T01:51:04Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 4 · green card filings: 1","filings_12m":4,"filings_prev_12m":2,"green_card_filings_12m":1,"median_offered_wage_usd":160500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":18,"reasons":["conf:4","velocity","win:early"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/amtrust-financial-security-engineer-applications","json_url":"https://alion.io/job/amtrust-financial-security-engineer-applications.json","meta":{"generated_at":"2026-11-06T11:36:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21111,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1953579},"rest":"https://alion.io/mcp/rest/get_company?id=1953579"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Famtrust-financial-security-engineer-applications"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Famtrust-financial-security-engineer-applications"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Famtrust-financial-security-engineer-applications"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/amtrust-financial-security-engineer-applications\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Famtrust-financial-security-engineer-applications"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3848721}},{"tool":"search_jobs","arguments":{"company":"amtrustfinancial.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3848721},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}