# Security Engineer

**Company**: Thomson Reuters
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $70,800 USD - $131,400 USD
**Category**: Security
**Industry**: Technology

**Apply**: https://thomsonreuters.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/United-States-of-America-Frisco-Texas/Security-Engineer_JREQ202763?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_6944eafd-e1b

## Description

Thomson Reuters is seeking a Security Engineer to join its Service Management & Transformation team. The successful candidate will execute security work across the company's application, cloud, and infrastructure estate, which spans on-premises data centers and major clouds.

Responsibilities:

- Execute security work across the full stack: apply patches, upgrade application and open-source dependencies, harden cloud and operating-system configuration, and implement guardrails, WAF, and network-isolation changes.

- Work with pull requests generated by AI-augmented SAST and SCA tooling, confirm fixes hold, and coordinate regression testing with application teams.

- Support patching cycles and golden-image refreshes, and help remove unused and outdated software from server estates.

- Implement controls and follow runbooks, standards, and risk-based prioritization set by the senior engineer and technical lead.

- Track status accurately from assignment through verified fix, and flag blockers early.

- Partner with application and platform teams to schedule and validate changes safely, and coordinate with the wider team across regions.

- Grow skills across application, infrastructure, and cloud security with support from senior engineers.

Requirements:

- 3+ years of experience in security engineering, software development, systems administration, or DevSecOps, with a desire to specialize in security, plus a bachelor's degree in Computer Science, Information Security, or a related field (or equivalent practical experience).

- Hands-on exposure to some of the following: patching, hardening, cloud configuration, network or identity controls, or scripting and automation.

- Exposure to one or more of AWS, Azure, GCP, and OCI, and to on-premises infrastructure.

- Basic understanding of security principles and common vulnerabilities, and of risk-based prioritization (CVSS and similar), with willingness to learn CISA KEV/EPSS in practice.

- Comfort working to defined processes, runbooks, and controls, and asking for review on complex work.

- Collaborative approach and strong ownership of the work shipped.

- Clear communication and attention to detail.

Benefits:

- Hybrid work model

- Flexibility and work-life balance

- Career development and growth

- Industry-competitive benefits

- Culture

- Social impact

- Making a real-world impact

## Skills

### Required
- security engineering
- software development
- systems administration
- DevSecOps
- cloud configuration
- network controls
- identity controls
- scripting
- automation

### Nice to have
- AWS
- Azure
- GCP
- OCI
- CISA KEV/EPSS

---

Source: [Apply at thomsonreuters.wd5.myworkdayjobs.com](https://thomsonreuters.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/United-States-of-America-Frisco-Texas/Security-Engineer_JREQ202763?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)