Principal Application Security Engineer

Cboe Global Markets

Principal Application Security Engineer at Cboe Global Markets providing senior technical leadership and owning security across hybrid engineering ecosystem. Collaborating with engineering teams to establish secure architecture patterns and standards.

Posted 6/19/2026full-timeChicago • Illinois • 🇺🇸 United StatesLead💰 $163,625 - $211,750 per yearWebsite

Tech Stack

Tools & technologies

AWSAzureCloudGoJavaJavaScriptKubernetesNode.jsPython

About the role

Key responsibilities & impact

Provide senior technical leadership and end-to-end ownership for embedding pragmatic, scalable security across our hybrid engineering ecosystem
Partner closely with application, platform, and infrastructure teams to define secure-by-default architecture patterns
Act as a senior technical partner to engineering leadership, influencing roadmaps, architecture decisions, and secure-by-default design patterns across the organization
Own secure architecture reviews and threat modeling for new systems and major changes
Define, mature, and drive adoption of application and API security standards
Own Kubernetes workload security standards across multi-cluster environments
Own the strategy for risk-based software vulnerability management
Own the secure adoption of AI-enabled development and security capabilities

Requirements

What you’ll need

12+ years of experience in application security, product security, or software engineering
Experience directly writing and delivering production software as a software engineer
Bachelor's degree in Computer Science, Information Security, or related field preferred
Relevant certifications preferred (e.g., CSSLP, CKS, OSCP, AWS/Azure Security Specialty)
Proven ability to read, write, and review production-grade code in at least one modern backend language (e.g., C++, Go, Java, C#, Python, Node.js)
Strong working knowledge of Kubernetes security primitives (RBAC, namespaces, service accounts, pod security) and container build practices
Hands-on experience integrating DevSecOps tooling (SAST, SCA, secret scanning, IaC/container scanning) into CI/CD pipelines
Experience securing hybrid environments with workloads running in both public cloud (EKS, AKS, GKE) and on-prem Kubernetes platforms
Exceptional communication, influence, and technical leadership skills.

Benefits

Comp & perks

Medical Coverage
Prescription Drug Coverage
Additional Medical Benefit
Dental Coverage
Vision Coverage
401K or Pension Company Match
Spending Accounts
Life and AD&D Insurance
Retirement Savings Plan
Employee Stock Purchase Plan (ESPP)
Voluntary & Additional Benefits
Paid Time Off

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

application securityproduct securitysoftware engineeringproduction softwarebackend programmingKubernetes securityDevSecOps toolingCI/CD pipelinesrisk-based software vulnerability managementAPI security standards

Soft Skills

technical leadershipcommunicationinfluence

Certifications

CSSLPCKSOSCPAWS Security SpecialtyAzure Security Specialty