Software Engineer - Information Security; Hybrid

Job Description

As a Full Stack Software Engineer within the Information Security and Risk Management (ISRM) team, you will contribute to the design, development, and maintenance of internal software applications and tools that support operational excellence and increased security maturity. As a member of the Application Security (App Sec) Platform Engineering team, you will build tools and capabilities to enhance App Sec processes.

In addition, you will partner closely with other teams across ISRM such as program management, finance, etc. to build practical, high-quality solutions based on their specific needs. Projects will range from building application security program tooling to developing tools and capabilities that help us operate better as an organization. You will apply modern full-stack development practices and leverage artificial intelligence to accelerate development and embed intelligent features into the solutions you build.

• Design, develop, and maintain full-stack web applications, internal tools, and API-driven solutions that support application security program management, including vulnerability discovery and tracking, data aggregation, risk reporting, and workflow automation.
• Build and support applications and tooling to enhance the efficiency of key support processes such as financial planning, project tracking, and headcount management.
• Leverage AI-assisted development tools (e.g., Claude Code, Git Hub Copilot, ChatGPT Codex, or similar) to accelerate coding, testing, and documentation workflows.
• Use CI/CD pipelines (e.g., Git Hub Actions, Jenkins, or similar) to build, test, and deploy solutions.
• Integrate AI/ML capabilities into applications to enable features such as intelligent alerting, anomaly detection, natural language interfaces, or automated triage to enhance the value of solutions delivered.
• Write clean, well-documented, secure, and maintainable code in modern languages such as Python and JavaScript/Type Script across both backend and frontend layers.
• Collaborate with stakeholders to gather requirements, translate business needs into technical specifications, iterate rapidly on working solutions, and advance working prototypes into production applications.
• Participate in code reviews, contribute to team engineering standards, and support peer learning across the team.
• Manage and prioritize a personal backlog of application enhancements and bug fixes, communicating status clearly to stakeholders.
• Understand and adhere to corporate solution development standards including security and quality requirements.

• Bachelor's Degree and 6 years of experience OR Master's Degree and 5 years of experience OR PhD and 0 years of experience.
• Proficiency in Python (backend services, scripting, automation) and JavaScript/Type Script (frontend and/or Node.js backend).
• Demonstrated experience building and deploying resilient and secure full-stack web applications, including frontend frameworks (e.g., React, Vue, or similar), REST APIs, and relational or No
  
  SQL databases.
• Hands-on experience using AI-assisted development tools to improve code quality, velocity, and documentation.
• Familiarity with application security concepts and secure coding practices (e.g., OWASP Top 10).
• Familiarity with Dev Ops/Dev Sec Ops  practices, CI/CD pipelines, and infrastructure-as-code to facilitate code build, test, and deployment activities.
• Familiarity with deploying production applications via cloud and containerized models as appropriate.
• Ability to work independently on multiple concurrent projects with minimal supervision.
• Strong written and verbal communication skills, with the ability to engage and partner with both technical and non-technical stakeholders.

• Experience integrating AI capabilities into production applications to enable enhanced usability, data insights, and autonomous/agentic workflow automation.
• Experience building solutions using low- and no-code platforms such as MS Power Apps, Out Systems, etc.
• Experience with project/operational tooling such as Jira, Service Now, or similar platforms.
• Experience building or using solutions to detect, prevent, or remediate security issues.
• Experience in large corporate or enterprise environments, ideally within technology, healthcare, or a regulated industry.

• The compensation range described below is the range of possible base pay compensation that the Company believes in good faith it will pay for this role at the time of this posting based on the job grade for this position. Individual compensation paid within this range will depend on many factors including geographic location, and we may ultimately pay more or less than the posted range.
  
  This range may be modified in the future.
• We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick), medical/dental/vision insurance and 401(k) to eligible employees.
• This job is eligible to participate in our short-term incentive programs.

Abb…