Advance the secure adoption of cloud-native and AI-enabled solutions through security guidance, architecture reviews, risk assessments, and practical security standards.
Serve as a trusted advisor to technical and business stakeholders by communicating risks, remediation priorities, and security best practices.
Qualifications
Bachelor’s degree in Computer Science, Information Technology, Computer Engineering, Cybersecurity, or a related field, or equivalent relevant professional experience.
5+ years of experience in application security, product security, DevSecOps, penetration testing, or security engineering.
Demonstrated experience working directly with software engineering teams to integrate security into modern software development processes and delivery pipelines.
Strong expertise in secure coding practices, source code analysis, vulnerability identification, threat modeling, and application security testing.
Hands-on experience implementing and operating application security controls including SAST, DAST, SCA, secrets scanning, and CI/CD security integrations.
Deep understanding of web application, API, and cloud-native security principles.
Preferred Qualifications
Experience securing Azure cloud and cloud-native application environments, including Azure services, containers, IaC, software supply-chain security, and CI/CD security controls.
Hands-on experience securing AI-enabled applications, copilots, AI agents, and agentic workflows, including risks involving data exposure, trust boundaries, identity and access management, prompt manipulation, and tool invocation.
Experience with Kubernetes and cloud-native security technologies, including container security, workload protection, admission controls, service meshes, and cloud-native security tooling.
Experience automating and scaling security operations through scripting, security tooling, metrics, reporting, and governance in regulated or business-critical environments.
Relevant application security, secure software development, penetration testing, or cloud security certifications are preferred, such as:
CSSLP (Certified Secure Software Lifecycle Professional)
GIAC Certified Web Application Defender (GWEB) or Web Application Penetration Tester (GWAPT)
OffSec Certified Professional (OSCP) or OffSec Web Expert (OSWE)
Burp Suite Certified Practitioner (BSCP)
Certified Kubernetes Security Specialist (CKS)
#LI-BL1
What We Offer
AmTrust Financial Services offers a competitive compensation package and excellent career advancement opportunities. Our benefits include: Medical & Dental Plans, Life Insurance, including eligible spouses & children, Health Care Flexible Spending, Dependent Care, 401k Savings Plans, Paid Time Off.
AmTrust strives to create a diverse and inclusive culture where thoughts and ideas of all employees are appreciated and respected. This concept encompasses but is not limited to human differences with regard to race, ethnicity, gender, sexual orientation, culture, religion or disabilities.
AmTrust values excellence and recognizes that by embracing the diverse backgrounds, skills, and perspectives of its workforce, it will sustain a competitive advantage and remain an employer of choice. Diversity is a business imperative, enabling us to attract, retain and develop the best talent available. We see diversity as more than just policies and practices. It is an integral part of who we are as a company, how we operate and how we see our future.
