Security Engineer (St. Louis)

REQUIRED QUALIFICATIONS:

• Bachelors degree in Cybersecurity Computer Science Information Technology or a related field or an equivalent combination of education training and practical experience.
• Three (3) to five (5) years of experience in security engineering platform security infrastructure security DevSecOps vulnerability management or a related technical field.
• Hands-on experience securing Kubernetes or containerized platforms including identity and access workload security network controls secrets images and secure configuration.
• Experience using vulnerability and security findings to assess risk prioritize remediation and improve security posture including configuring or maintaining the security tools that produce those findings.
• Experience scripting or building automation with Python PowerShell Bash or a similar language.
• Understanding of DevSecOps and secure software-delivery practices including CI/CD container images application dependencies and software supply-chain risk.
• Ability to troubleshoot technical issues analyze risk document findings and move assigned work to completion with limited direction.
• Strong written and verbal communication skills sound engineering judgment and the ability to collaborate effectively with platform engineers developers security teams and compliance partners.

PREFERRED QUALIFICATIONS:

• Experience applying Kubernetes security practices in Red Hat OpenShift including SCCs operators and cluster policy.
• Experience with Red Hat Advanced Cluster Security (ACS) Wiz Tenable or comparable container security cloud security and vulnerability-management platforms.
• Hands-on experience implementing controls such as SAST SCA secret scanning SBOM generation container scanning image signing or provenance.
• Ability to read and review code in at least one common language such as Java TypeScript Python or Go along with familiarity with common application and API vulnerability classes.
• Experience securing service mesh (such as Istio) ingress API gateways or Linux hosts.
• Experience with GitOps Helm Ansible Terraform Kubernetes operators or YAML-based pipeline automation.
• Familiarity with security standards and practices such as the OWASP Top 10 OWASP API Security Top 10 NIST Secure Software Development Framework CIS Benchmarks SLSA or MITRE ATT&CK.
• Relevant security or cloud certifications such as Security CISSP CCSP or Certified Kubernetes Security Specialist (CKS).

Location: This is a hybrid role based in St. Louis MO.

Certain states and localities require employers to post a reasonable estimate of salary range. A reasonable estimate of the current base pay range for this position is $92000 to$138000 annually. Actual salary will be based on a variety of factors including shift location experience skill set performance licensure and certification and business needs. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation such as bonuses or commissions that is not included in the base pay.

The well-being of WWT employees is essential. So when it comes to our benefits package WWT has one of the best. We offer the following benefits to all full-time employees:

• Health and Wellbeing: Health (Medical & Prescription) Dental and Vision Care Onsite Health Centers (MO & IL) Employee Assistance Program Wellness program
• Financial Benefits: Competitive Pay Profit Sharing 401k Plan with Company Matching Life and Disability Insurance Flexible Spending Accounts Tuition Reimbursement
• Paid Time Off: PTO & Holidays Parental Leave Medical Leave Military Leave Bereavement Day of Caring
• Additional Perks: Family Planning Benefits Nursing Mothers Benefits Voluntary Legal Voluntary Supplemental Accident/Illness/Hospital Voluntary ID Theft Pet Insurance Employee Discount Program

Note: This is not an all-encompassing list and should not be used as a complete description of the plans benefits. For more information seeour US Benefits Website

We strive to create an environment where all employees are empowered to succeed based on their skills performance and dedication. Our goal is to cultivate a culture of belonging that encourages innovation collaboration and respect for all team members ensuring that WWT remains a great place to work for All!

If you requireaccessibilityaccommodation(s) or adjustment during any stage of the hiring process please let your WWT Recruiter know. The recruiter will work with you to understand your needs and help ensure an accessible experience throughout the interview process.

If you have any questions or concerns about this posting please email .

#LI-SSJ1

#LI-REMOTE

PLEASE NOTE: This position requires permanent U.S. work authorization. Candidates requiring current or future visa sponsorship including those on OPT CPT or H1/H4 are not eligible for this role. This role is not open for staffing partners or corptocorp candidates.

Why WWT

World WideTechnology (WWT) strives to make a new world happen. WWTs work benefits clients and partners as much as it does its people and community across the globe.

Founded in 1990 WWT brings together strategy deep technicalexpertiseand world-class partnerships to help public and private sector organizations design build and scale intelligent AI digital cybersecuritycloudand infrastructure solutions. Through its Advanced Technology Center (ATC)a collaborative ecosystem featuringstate-of-the-arthardware and softwareWWT enables clients and partners to conceptualize test andvalidateinnovative technology and then deploy solutions at scale using its global integration anddistributioncapabilities.

With more than 14000 team members and over 60 locations globally WWTs culturegrounded in core values and leadership philosophieshas been recognized by Fortune and Great Place to Work for its commitment to innovation trust and creating a great place to work for all. WWT provides products and services to large enterprise global serviceproviderand public sector clients in up to 130 countries across six continents. Softchoice aWorld WideTechnology company supports commercial and SMB markets in the U.S. and Canada.

Want to work with highly motivated individuals on high-performance teamsJoinWWT today!

Why Join the Internal WWT IT Team

The Internal WWT IT team designs builds secures and operates the platforms that support WWTs internal applications and engineering teams. Our work enables reliable scalable and automated delivery of software and services that support the companys business objectives.

You will work on foundational technology that matters: shared platforms developer tooling security controls and automation used across WWT IT. The environment values ownership collaboration continuous learning and practical improvement.

Why Join INFOPS Application Development

INFOPS Application Development operates within Internal IT Platform Engineering and focuses on enabling developers. The team builds and operates platforms workflows and automation that allow application teams to securely self-service infrastructure deployments data services and integrations.

Our portfolio includes Red Hat OpenShift application environments; shared data and messaging services such as MongoDB PostgreSQL Redis RabbitMQ and Apache Solr; and delivery capabilities built around GitHub Actions Codefresh Argo CD Helm GitOps APIs and infrastructure-as-code practices. The team is also expanding its service mesh and AI gateway capabilities creating an opportunity to shape how service-to-service and agent-to-service traffic is secured from the start.

This role sits inside the platform team not outside it. You will work directly alongside the engineers who build and run these platforms with the access and context to fix problems at the source and a mandate to make the secure path the easy path for developers.

What Will You Be Doing

This Security Engineer will be embedded with the platform engineering team and will focus on strengthening the security of Kubernetes and Red Hat OpenShift platforms and the services running within them. The role will assess vulnerabilities and platform security posture drive practical remediation automate repeatable security activities and improve security across software-delivery and supply-chain workflows.

You will independently execute well-defined work contribute to approaches for security problems and own assigned deliverables. You will partner with platform engineers application teams and enterprise security functions to translate findings and guidance into actionable remediation plans durable controls and measurable security improvements.

Platform & Technology Scope

You will work primarily with Kubernetes and Red Hat OpenShift environments across a hybrid footprint of on-premises and cloud-connected infrastructure and with the shared application platforms running within them including MongoDB PostgreSQL Redis RabbitMQ and Apache Solr. The delivery ecosystem includes GitHub Actions Codefresh Argo CD GitOps Helm APIs and configuration-as-code practices.

The team uses Wiz Tenable and Red Hat Advanced Cluster Security (ACS) for vulnerability management Kubernetes and container security compliance and risk visibility. Experience with these platforms is helpful but equivalent experience with comparable security technologies is also relevant.

This role focuses on security engineering for the platforms the team builds and operates working in close partnership with the enterprise security teams that lead WWTs broader security program.

Use of approved AI-assisted engineering tools is expected and there is real room to build with them: automating security analysis triage and remediation workflows and helping shape how the team uses AI and agentic tooling safely. As with any tool we expect sound judgment validation of results and secure data-handling practices.

RESPONSIBILITIES:

• Monitor emerging vulnerabilities and regularly assess the security posture of Kubernetes OpenShift underlying Linux hosts container workloads and shared platform services; identify and prioritize risks and control gaps and drive assigned remediation through completion.
• Develop automation to continuously assess security posture streamline vulnerability management and remediate repeatable well-understood security issues where appropriate.
• Implement and improve Kubernetes and OpenShift security controls including RBAC Security Context Constraints (SCCs) Pod Security Admission network policies and segmentation ingress and service mesh security (such as mTLS and authorization policies) secrets and certificate management workload identity and policy-as-code controls.
• Configure integrate maintain and optimize security tools to provide accurate actionable insight into platform vulnerabilities and risks.
• Evaluate and recommend security tools and technical controls that improve vulnerability management security monitoring access visibility and compliance.
• Strengthen DevSecOps and software supply-chain security across CI/CD and GitOps workflows including vulnerability and secret scanning dependencies container images SBOMs image provenance and workflow permissions.
• Partner with platform and application engineers to interpret findings determine practical remediation approaches that balance security with reliability developer experience and business needs and incorporate security into platform designs and delivery workflows.
• Document security findings control decisions remediation approaches exceptions standards and recurring processes and communicate material risks to technical and non-technical stakeholders.
• Participate in security investigations incident response a shared on-call rotation and scheduled platform maintenance some of which may occur outside normal business hours.

Required Experience:

IC