Security Engineer III

Our client, a leading airline, is seeking a Security Engineer III to support the Application Security organization by designing, building, and scaling enterprise security automation capabilities.

Contract duration: 32 weeks (08/24/2026 – 04/08/2027). Location: Chicago, IL. Fully remote with 0–10% travel.

Responsibilities

• Design, develop, enhance, and maintain enterprise security automation capabilities supporting security control validation, evidence collection, compliance decisions, and reporting
• Build scalable automation services, APIs, validators, data processing logic, and integration components using Python and TypeScript
• Develop AWS-based cloud-native automation workflows for secure, resilient, and scalable data processing and enterprise security integrations
• Translate application security requirements, security controls, and compliance objectives into automated validation logic and evidence collection
• Integrate security automation into secure software development workflows, including CI/CD pipelines, source code repositories, and engineering platforms
• Design and build AI-enabled automation components that support AI-enabled secure SDLC (AIDLC) capabilities
• Collaborate with Application Security, DevSecOps, cloud, platform, compliance, and application teams while producing technical documentation, implementation guidance, and operational runbooks

Requirements

• 7+ years of experience in software engineering, security engineering, DevSecOps, application security automation, or enterprise platform engineering
• 7+ years of advanced Python development experience building enterprise-grade automation, backend services, API integrations, and scalable data processing solutions
• Hands-on experience with TypeScript or JavaScript for automation services, platform tooling, or application integrations
• Working knowledge of AWS infrastructure and cloud-native services supporting secure automation architectures
• Strong understanding of application security concepts including SAST, DAST, SCA, secrets scanning, secure coding, API security, vulnerability management, and secure SDLC practices
• Experience integrating enterprise systems, APIs, CI/CD platforms, source code repositories, dashboards, and security tools
• Experience using AI technologies in engineering workflows to improve design, coding, testing, documentation, and automation

Preferred Qualifications

• Experience building compliance automation, control validation, evidence collection, or audit-readiness platforms
• Knowledge of OWASP ASVS, NIST 800-53, OWASP Top 10, CWE, secure coding standards, or enterprise security frameworks
• Experience with Harness, GitHub Actions, Jenkins, or similar CI/CD platforms
• Experience developing custom CodeQL queries, security validators, or rule-based detection logic
• Experience with AI-assisted software development, AI-enabled secure SDLC (AIDLC), prompt engineering, semantic code analysis, or AI-supported compliance validation
• Experience integrating with security technologies such as SAST, DAST, SCA, SIEM, ITSM, vulnerability management, cloud security, or enterprise data lake platforms
• Experience with AWS services including Lambda, S3, IAM, Glue, DynamoDB, API Gateway, CloudWatch, Step Functions, or similar services

Skills

• Strong analytical and problem-solving skills with the ability to translate security requirements into scalable automation solutions
• Excellent written and verbal communication skills with technical and non-technical stakeholders
• Collaborative mindset with cross-functional engineering, security, and compliance teams
• Hands-on engineering approach with a focus on scalable, production-quality solutions
• Ability to leverage AI technologies responsibly to improve engineering productivity and automation maturity

Pay

The approximate pay range for this position is between $50.00 and $77.00 per hour.

Benefits

• Medical, Dental, & Vision Insurance Plans
• Employee-Owned Profit Sharing (ESOP)
• 401(k) offered