Implement security controls within CI/CD pipelines and development practices, partnering with development and operations teams to integrate and maintain those controls throughout software delivery.
Develop and maintain security tools, frameworks, and processes that support secure coding. Automate selected security testing tasks within development workflows and make the resulting findings actionable for engineering teams.
Perform dynamic scanning, penetration testing, and vulnerability assessments on web, mobile, and cloud-based applications. Work with engineering teams to prioritize findings, guide remediation, and validate fixes.
Provide training and guidance to development and operations teams on secure coding and operations principles.
Contribute to security policies, procedures, and controls, and translate applicable requirements into implemented controls within DevSecOps workflows.
Configure and maintain application-facing network security controls in collaboration with application and infrastructure teams, aligning protections with application access requirements.
Apply working knowledge of Azure and AWS infrastructure, services, and security capabilities to implement security controls for cloud-based applications and their supporting environments.
Stay informed about emerging security threats, technologies, and best practices, applying relevant insights as needed.
Document systems, processes, and procedures to foster knowledge sharing and maintain compliance.
AI-enabled DevSecOps responsibilities
Evaluate and integrate AI-assisted tools into DevSecOps workflows to support security automation, code review, vulnerability analysis, and remediation, retaining human oversight of security decisions.
Review and validate AI-generated code, scripts, configurations, and remediation recommendations using code review, automated testing, and security scanning before adoption or deployment.
Establish and document responsible-use practices for AI-assisted engineering, including appropriate handling of sensitive code and data, controlled tool access, and clear review and approval expectations.
Requirements
Education
Bachelor’s degree in Information Security, Computer Science, Computer Engineering, or a related field, or equivalent practical experience in application security or DevSecOps.
Experience
Minimum of 5+ years in a security-focused role, preferably involving application security/DevSecOps, with demonstrated ability to independently deliver security improvements in collaboration with development and operations teams.
Demonstrated hands-on experience integrating security measures into CI/CD pipelines, including implementing and maintaining those integrations using DevOps tools and practices.
Hands-on experience securing containerized environments using Docker and Kubernetes, with the ability to explain the security controls implemented and how they support secure deployment and operation.
Proficiency in scripting languages such as PowerShell, Bash, or Python.
Working knowledge of networking concepts (DNS, load balancers, VPNs, VPCs, and access control).
AI experience
Hands-on experience using AI-assisted development or security tools in engineering workflows, with the ability to explain the use case, personal contribution, validation approach, and results.
Ability to critically assess AI-generated code, scripts, configurations, and security findings; identify incorrect assumptions or insecure recommendations; and validate outputs through testing and security analysis.
Experience applying responsible-use practices for AI tools, including protecting sensitive code and data, limiting tool permissions, and maintaining human review of consequential changes.
Key Skills
Knowledge of Secure Coding Practices
Able to understand and apply secure coding principles.
Familiarity with common vulnerabilities (e.g., OWASP Top Ten).
Collaboration and communication
Ability to work with development and operations teams across the development lifecycle, explain security requirements clearly, and agree on practical approaches for integrating security into delivery workflows.
Practical Application Security Knowledge
Experience with application security tooling and automation supportive of DevSecOps efforts.
Experience in Incident Response
Monitoring and responding to security incidents.
Guiding remediation and mitigation strategies.
Interview Policy & Privacy Notice
A video interview is required for this position. Video interviews are transcribed. Transcriptions are retained and may be reviewed by CCC and our recruiters. Candidates are not permitted to use generative AI or automated assistance during the interviews unless explicitly allowed by the interview team for a specific exercise. Our Job Applicant Privacy Notice is available HERE.
About CCC's Commitment to Employees
CCC Intelligent Solutions understands that our employees play an integral role in our vision to shape a world where life just works. Our team is defined by our values of Integrity, Customer-Focus, Innovation, Inclusion & Diversity, Tenacity, and Connection. Through diverse perspectives, purposeful innovation, and the strength of connections, our technologies empower the people and industry relied upon to keep lives moving forward when it matters most.
At CCC, together everyone can thrive as we innovate and collaborate, creating employee experiences that just work. We are committed to providing opportunities for our people to make real-life impacts, advance in their careers, and contribute to CCC’s success.
CCC offers competitive compensation and benefits to support you and your families, including:
401K Match
Paid time off
Annual Incentive Plan Performance Bonus
Comprehensive health insurance
Adoption Assistance
Tuition Reimbursement
Wellness Programs
Stock Purchase Plan options
Employee Resource Groups
For more information about our benefits, please check out our careers site.
Here, you belong. You are seen, valued, and respected. We celebrate you for who you are and all you bring. Every voice is heard and is important to our success. You can hear what employees have to say about our culture here
If you require reasonable accommodation to complete a job application, please contact (800) 621-8070.
