{"id":3682355,"url":"https://alion.io/job/equinix-information-security-engineer-devsecops","title":"Information Security Engineer (DevSecOps)","company":{"id":7655,"name":"Equinix","domain":"equinix.com","url":"https://alion.io/company/equinix","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":79,"open_postings":24,"ghost_share":0,"stale_share":0.833,"repost_share":0,"time_to_fill_p50_days":26,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Dallas, United States","Toronto, Canada"],"countries":["US","CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":106000,"max":159000,"currency":"USD","period":"year","gross":null,"usd_annual":159000},"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"GitHub Actions","optional":false},{"name":"LLM","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Pipeline as Code","optional":false},{"name":"Python","optional":false},{"name":"Semgrep","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"Snyk","optional":false},{"name":"SonarQube","optional":false},{"name":"Sonatype Nexus IQ","optional":false},{"name":"STRIDE","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-11-03T13:40:30Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-03T19:09:02Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Who are we?\nEquinix is the world’s digital infrastructure company®, shortening the path to connectivity to enable the innovations that enrich our work, lifeand planet.\nA place where tech thinkers and future builders turn bold ideas into breakthrough experiences, we welcome your unique perspective.Help us challenge assumptions, uncover bias, and remove barriers-because progress starts with fresh ideas. You’ll find belonging, purpose, and a team that welcomes you-because when you feel valued, you’re empowered to do your best work.Job Summary\nThe Application Security Engineer will be responsible for strengthening and continuously improving the security posture of the organization’s applications. This role involves integrating security into the software development lifecycle (SDLC), embedding and automating application security testing within CI/CD pipelines, and driving timely remediation of identified vulnerabilities.\nThe engineer will work closely with application teams to perform security design reviews, triage and assess vulnerabilities, and guide teams on effective remediation, security best practices, secure coding and threat modeling.\nSuccess for this role requires that you are\nFamiliar with application security concepts, standards and trends (OWASP Top 10, OWASP ASVS, secure SDLC) \nAble to interpret and apply security principles and standards to application designs, architectures, configurations and policies \nAble to automate security controls using pipeline-as-code and infrastructure-as-code \nDriven to learn new things; excited about challenges and finding solutions \nA strong builder mentality with a drive to “see things through” \nAble to communicate technical concepts, risk and remediation guidance clearly and concisely to developers, peers and management \nAble to demonstrate good judgment in prioritizing vulnerabilities based on their impact to the confidentiality, integrity and availability of information \nResponsibilities\nIntegrate, operate and continuously improve application security testing tools (SAST, SCA, Secret Scanning and DAST) within the SDLC \nImplement shift-left security practices to ensure vulnerabilities are detected and remediated early in the SDLC \nConduct threat modeling, secure design reviews and architecture reviews with application teams to identify and mitigate risks early \nTriage, validate and prioritize findings from SAST, SCA, Secret Scanning and DAST; tune rules, policies and quality gates to reduce false positives \nPartner with application teams to remediate identified vulnerabilities by providing clear, actionable guidance and tracking findings through to closure \nRecommend and promote security best practices and secure coding standards, and educate developers on common vulnerability classes \nBuild and maintain automation and scripts (e.g., Python, Terraform) to onboard applications to security tooling, enforce policy as code, and report on application security metrics \nTrack and report on application security posture (e.g., vulnerability trends, remediation timelines, tool coverage) to stakeholders and management \nModel the Equinix culture and values \nKnowledge / Skills / Abilities\nHands-on experience with SAST, SCA, Secret Scanning and DAST tooling, including interpreting results and guiding remediation \nHands-on experience with CI/CD tools such as GitHub Actions, including integrating security scans and quality gates into pipelines \nStrong understanding of the OWASP Top 10, OWASP API Security Top 10, OWASP ASVS and related standards (NIST, CIS Benchmarks) and the ability to recommend solutions aligned with them \nHands-on experience performing threat modeling (e.g., STRIDE, data flow diagrams) and secure design reviews \nUnderstanding of AI and LLM security risks and mitigations (e.g., OWASP Top 10 for LLM Applications, prompt injection, data leakage, model and AI supply chain risks) and how to secure AI-enabled applications \nWorking knowledge of common vulnerability classes (e.g., injection, XSS, SSRF, broken access control, insecure deserialization) and how to remediate them in code \nWorking knowledge of securing applications built on public cloud services (any of the major cloud providers) \nAbility to partner with application teams to remediate vulnerabilities and adopt secure coding practices \nDemonstrated ability to work within globally dispersed and cross-functional teams \nQualifications\n4-5 years of work experience in Application Security or DevSecOps in a medium or large corporate environment; a bachelor’s degree in computer science, engineering or a related field is preferred \nDemonstrated hands-on experience with each of the following: \nSCA (e.g., Apiiro, Nexus IQ, Snyk) \n\nSAST (e.g., SonarQube, Semgrep) \n\nSecret Scanning \n\nDAST / API security (e.g., Traceable, Burp Suite) \n\nThreat Modeling \n\nGitHub Actions \n\nTerraform \n\nExperience collaborating with application teams to suggest security best practices and remediate identified vulnerabilities \nThe targeted pay range for this position in the following location is / locations are:\nUnited States - Dallas Infomart Office DAI : 106,000 - 159,000 USD / Annual\nCanada - Toronto Office TRO : 90,000 - 134,000 CAD / Annual\nOur pay ranges reflect the minimum and maximum target for new hire pay for the full-time position determined by role, level, and location.The pay range shown is based on our compensation structure in place at the time of posting and may be updated periodically based on business needs. Individual pay is based on additional factors including job-related skills, experience, and relevant education and/or training.\nThe targeted pay range listed reflects the base pay only and does not include bonus, equity, or benefits. Employees are eligible for bonus, and equity may be offered depending on the position.\nEquinix Benefits\nAs an employee, you become important to Equinix’s success. We ensure all your benefits are in line with our core values: competitive, inclusive, sustainable, connected and efficient. We keep them competitive within the current marketplace to ensure we’re providing you with the best package possible. So, wherever you are in your career and life, you’ll be able to enhance your experience and bring your whole self to work.\nEmployee Assistance Program: An Employee Assistance program is available to all employees.\n\nUS Benefits: - Insurance: You may enroll in health, life, disability and voluntary plans that are designed for you and your eligible family members. - Retirement: You and Equinix may contribute to a retirement plan to help you plan for your financial future. - Paid Time Off (PTO) and Paid Holidays: You will receive an accrued amount of PTO each pay period along with various paid holidays for you to rest and recharge. Eligibility requirements apply to some benefits. Benefits are subject to change and may be subject to specific plan or program terms.\n\nCanada Core Benefits: - Insurance: You may enroll in healthcare coverage that is designed to complement the provincial healthcare system, along with life, disability and optional benefit plans that are designed for you and your eligible family members. - Retirement: You may also enroll in Equinix-sponsored retirement or savings plans: Defined Contribution Pension Plan (DCPP), Group Retirement Savings Plan (RRSP) and Tax-Free Savings Plan (TSFA). - Vacation and Paid Holidays: Equinix offers both vacation and personal time, along with various paid holidays for you to rest and recharge. Eligibility requirements apply to some benefits. Benefits are subject to specific plan or program terms, and to change at Equinix discretion.\nEquinix is committed to ensuring that our employment process is open to all individuals, including those with a disability. If you are a qualified candidate and need assistance or an accommodation, please let us know by completing this form.\nEquinix is an Equal Employment Opportunity and, in the U.S., an Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to unlawful consideration of race, color, religion, creed, national or ethnic origin, ancestry, place of birth, citizenship, sex, pregnancy / childbirth or related medical conditions, sexual orientation, gender identity or expression, marital or domestic partnership status, age, veteran or military status, physical or mental disability, medical condition, genetic information, political / organizational affiliation, status as a victim or family member of a victim of crime or abuse, or any other status protected by applicable law.\nWe use artificial intelligence in our hiring process. Learn morehere .\n\nThis posting is a new position within our organization.","description_format":"text","description_chars":8715,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Data Centers & Colocation","Network Interconnect"],"lifecycle":[{"event":"open","at":"2026-11-03T13:40:30Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 97 · green card filings: 22","filings_12m":97,"filings_prev_12m":142,"green_card_filings_12m":22,"median_offered_wage_usd":151576,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":12}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":26,"reasons":["conf:3","win:early","comp:brand"],"computed_at":"2026-11-03T22:48:11Z"},"pay":{"stated_usd_annual":159000,"is_top_pay":true},"html_url":"https://alion.io/job/equinix-information-security-engineer-devsecops","json_url":"https://alion.io/job/equinix-information-security-engineer-devsecops.json","meta":{"generated_at":"2026-11-03T22:48:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1415,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7655},"rest":"https://alion.io/mcp/rest/get_company?id=7655"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fequinix-information-security-engineer-devsecops"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fequinix-information-security-engineer-devsecops"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fequinix-information-security-engineer-devsecops"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/equinix-information-security-engineer-devsecops\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fequinix-information-security-engineer-devsecops"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3682355}},{"tool":"search_jobs","arguments":{"company":"equinix.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3682355},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}