{"id":2010582,"url":"https://alion.io/job/cboe-principal-application-security-engineer","title":"Principal Application Security Engineer","company":{"id":47851,"name":"Cboe","domain":"cboe.com","url":"https://alion.io/company/cboe","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Welcome to the Jungle","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Chicago, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":163625,"max":211750,"currency":"USD","period":"year","gross":null,"usd_annual":211750},"salary_estimate":null,"experience_years_min":12,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EKS","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure AKS","optional":false},{"name":"C#","optional":false},{"name":"C++","optional":false},{"name":"CI/CD","optional":false},{"name":"Go","optional":false},{"name":"Google GKE","optional":false},{"name":"Java","optional":false},{"name":"Kubernetes","optional":false},{"name":"Node JS","optional":false},{"name":"Python","optional":false},{"name":"GCP","optional":true},{"name":"JavaScript","optional":true}],"status":"live","first_seen_at":"2026-10-04T00:06:57Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-14T05:16:48Z","board_verified":true,"closed_at":null,"days_open":10,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":10},"description":"Join Cboe's Cybersecurity team as a Principal Application Security Engineer. In this role, you will provide senior technical leadership and end-to-end ownership for embedding security across our hybrid engineering ecosystem. You will partner closely with application, platform, and infrastructure teams to define secure architecture patterns, shape strategic security direction, and drive implementation of security controls throughout the software development lifecycle. This position requires deep hands-on expertise, strong systems thinking, and the ability to influence engineering practices at scale.\nMissions\nAssurer la direction technique et la responsabilité de l'intégration de la sécurité dans l'écosystème d'ingénierie hybride de l'entreprise.\nCollaborer avec les équipes d'application, de plateforme et d'infrastructure pour définir des modèles d'architecture sécurisés par défaut et diriger la mise en œuvre des contrôles de sécurité tout au long du cycle de vie du développement logiciel.\nÉtablir et faire évoluer les normes de sécurité des applications et des API, y compris les modèles d'authentification et d'autorisation, et fournir des conseils de niveau principal pour les changements de code et de conception à haut risque.\nProfil recherché\n - 12+ years of experience in application security, product security, or software engineering, including significant experience shaping architecture, setting standards, and driving security outcomes across complex production environments- Bachelor's degree in Computer Science, Information Security, or related field preferred\n- Experience directly writing and delivering production software as a software engineer\n- Relevant certifications preferred (e.g., CSSLP, CKS, OSCP, AWS/Azure Security Specialty)\n- Hands-on experience integrating DevSecOps tooling (SAST, SCA, secret scanning, IaC/container scanning) into CI/CD pipelines\n- Experience securing hybrid environments with workloads running in both public cloud (EKS, AKS, GKE) and on-prem Kubernetes platforms\n- Proven ability to read, write, and review production-grade code in at least one modern backend language (e.g., C++, Go, Java, C#, Python, Node.js), with the judgment to guide secure engineering decisions in high-impact systems\n- Strong working knowledge of Kubernetes security primitives (RBAC, namespaces, service accounts, pod security) and container build practices\n- Exceptional communication, influence, and technical leadership skills, with a demonstrated ability to drive alignment, establish direction, and own outcomes across engineering, platform, and security stakeholders\n- Candidates must be legally authorized to work in the United States without the need for employer sponsorship now or in the future","description_format":"text","description_chars":2746,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Marketplaces","E-learning","Stock Exchanges & Market Infrastructure"],"lifecycle":[{"event":"open","at":"2026-10-07T13:02:03Z"}],"visa":[],"liveness":{"score":75,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.833,"p_room":0.9,"age_days":10,"expected_fill_days":23,"reasons":["conf:1","velocity","win:mid"],"computed_at":"2026-10-14T06:34:16Z"},"pay":{"stated_usd_annual":211750,"is_top_pay":true},"html_url":"https://alion.io/job/cboe-principal-application-security-engineer","json_url":"https://alion.io/job/cboe-principal-application-security-engineer.json","meta":{"generated_at":"2026-10-14T08:46:44Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9510,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":47851},"rest":"https://alion.io/mcp/rest/get_company?id=47851"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcboe-principal-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcboe-principal-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcboe-principal-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cboe-principal-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcboe-principal-application-security-engineer"}]}