The Security Engineer is responsible for strengthening and continuously improving the security posture of our applications. This role includes integrating security best practices into the application development lifecycle, automating security controls, and implementing infrastructure and configuration as code.

In addition to a primary focus on Information Security, this role will collaborate closely with application teams to assess vulnerabilities and provide guidance on secure remediation strategies.

Senior Associate Information Security Engineer

Your responsibilities

• Familiarity with information security concepts, standards, and current trends.
• Ability to implement and maintain infrastructure and configuration as code.
• A commitment to continuous learning and a proactive approach to solving complex challenges.
• Strong accountability and a focus on achieving outcomes.
• The ability to interpret and apply security principles and standards to system designs, configurations, and policies.
• Clear and concise communication of technical concepts to both peers and management.
• Sound judgment regarding the confidentiality, availability, and integrity of information.

Our requirements

• Embed security controls and tools into CI/CD pipelines (e.g., SAST, SCA, DAST, Secrets Scanning).
• Implement shift-left security practices to ensure vulnerabilities are detected and remediated early in the SDLC.
• Collaborate with application teams on secure design principles, threat modeling, architecture reviews, and remediation strategies.
• Design, build, document, and maintain efficient, reusable, and reliable code for Security Orchestration, Automation, and Response (SOAR), policy-as-code, and Security Operations and Analytics platforms.
• Model the Equinix culture and values.
• Hands-on experience with CI/CD tools (ideally GitHub Actions).
• Strong understanding of secure system design using public cloud services (any major cloud provider).
• Functional understanding of SAST, SCA, and DAST concepts.
• Experience building automations and services using Terraform, Ansible, Python.
• Ability to assess application security risks and recommend solutions aligned with industry standards (OWASP, NIST, CIS Benchmarks).
• Knowledge of authentication and authorization technologies and methods (e.g., SAML, HMAC, OAuth).
• Ability to partner with application teams to remediate vulnerabilities and adopt secure coding practices.
• Demonstrated ability to work effectively within globally dispersed, cross-functional teams.
• Previous experience in Security Engineering or DevSecOps in a medium or large corporate environment.
• Demonstrated hands-on experience with at least a couple of the following technologies:
• SCA (e.g., Apiiro, Nexus IQ, Snyk)
• SonarQube
• API security, DAST (e.g., Traceable)
• OPSWAT MetaDefender
• Terraform
• Experience with distributed systems (e.g., microservices, Kubernetes).

What we offer

• Employment in a stable company with an established position in the market
• Possibility to work within fast growing world’s 500 Fortune digital infrastructure company
• Challenging job in a dynamic, professional, international and multicultural environment
• Possibility to participate in company sponsored trainings package
• Employee Assistance Program – assess to free counselling legal and financial consultations and crisis intervention
• Paid employee referral program
• Opportunity to work in supportive, inclusive environment with People-Centric Culture
• Competitive salary and yearly bonus as well as a well-defined career path shaped to the individuals career focus & priorities
• Attractive benefits package