Software Engineer - Information Security (Hybrid)

As a Full Stack Software Engineer within the Information Security and Risk Management (ISRM) team (Application Security Platform Engineering), you will design, develop, and maintain internal software applications and tools that enhance operational excellence and AppSec processes.

Responsibilities:
- Design, develop, and maintain full-stack web applications, internal tools, and API-driven solutions for application security program management (vulnerability discovery/tracking, data aggregation, risk reporting, workflow automation).
- Build/support tooling to improve efficiency of support processes (financial planning, project tracking, headcount management).
- Use AI-assisted development tools (e.g., Claude Code, GitHub Copilot, ChatGPT Codex or similar) to accelerate coding, testing, and documentation.
- Use CI/CD pipelines (e.g., GitHub Actions, Jenkins, or similar) to build, test, and deploy.
- Integrate AI/ML features (intelligent alerting, anomaly detection, natural language interfaces, automated triage).
- Write secure, maintainable code in Python and JavaScript/TypeScript across backend and frontend.
- Collaborate with stakeholders to gather requirements and move prototypes to production.
- Participate in code reviews, engineering standards, and peer learning.
- Manage/prioritize backlog of enhancements and bug fixes; communicate status.
- Adhere to security/quality solution development standards.

Qualifications:
- B.S. + 6 years OR M.S. + 5 years OR PhD + 0 years.
- Proficiency in Python and JavaScript/TypeScript (frontend and/or Node.js).
- Experience building/deploying resilient, secure full-stack apps (React/Vue or similar, REST APIs, relational/NoSQL databases).
- Hands-on AI-assisted development tool usage.
- Familiarity with app security concepts and secure coding (e.g., OWASP Top 10).
- Familiarity with DevOps/DevSecOps, CI/CD, and infrastructure-as-code.
- Familiarity with cloud/container deployments.
- Ability to work independently on multiple projects.
- Strong communication with technical and non-technical stakeholders.

Preferred:
- Integrating AI capabilities for usability, insights, and autonomous/agentic automation.
- Low/no-code platform experience (MS Power Apps, OutSystems, etc.).
- Project/operational tooling (Jira, ServiceNow, or similar).
- Experience detecting/preventing/remediating security issues.
- Enterprise/regulated-industry experience (tech/healthcare).

Benefits (explicitly stated): Paid time off; medical/dental/vision insurance; 401(k); short-term incentive eligible.