Description
Thomson Reuters is seeking a Security Engineer to join its Service Management & Transformation team. The successful candidate will execute security work across the company's application, cloud, and infrastructure estate, which spans on-premises data centers and major clouds.
Responsibilities:
- Execute security work across the full stack: apply patches, upgrade application and open-source dependencies, harden cloud and operating-system configuration, and implement guardrails, WAF, and network-isolation changes.
- Work with pull requests generated by AI-augmented SAST and SCA tooling, confirm fixes hold, and coordinate regression testing with application teams.
- Support patching cycles and golden-image refreshes, and help remove unused and outdated software from server estates.
- Implement controls and follow runbooks, standards, and risk-based prioritization set by the senior engineer and technical lead.
- Track status accurately from assignment through verified fix, and flag blockers early.
- Partner with application and platform teams to schedule and validate changes safely, and coordinate with the wider team across regions.
- Grow skills across application, infrastructure, and cloud security with support from senior engineers.
Requirements:
- 3+ years of experience in security engineering, software development, systems administration, or DevSecOps, with a desire to specialize in security, plus a bachelor's degree in Computer Science, Information Security, or a related field (or equivalent practical experience).
- Hands-on exposure to some of the following: patching, hardening, cloud configuration, network or identity controls, or scripting and automation.
- Exposure to one or more of AWS, Azure, GCP, and OCI, and to on-premises infrastructure.
- Basic understanding of security principles and common vulnerabilities, and of risk-based prioritization (CVSS and similar), with willingness to learn CISA KEV/EPSS in practice.
- Comfort working to defined processes, runbooks, and controls, and asking for review on complex work.
- Collaborative approach and strong ownership of the work shipped.
- Clear communication and attention to detail.
Benefits:
- Hybrid work model
- Flexibility and work-life balance
- Career development and growth
- Industry-competitive benefits
- Culture
- Social impact
- Making a real-world impact