Security Engineer

Security Engineer

The Opportunity

Service Management & Transformation

Do you want to get hands-on securing a global estate? Thomson Reuters™ is building a dedicated security engineering capability, and this role is where the work gets shipped. This role sits on our Service Management & Transformation team.

As a Security Engineer, you will execute security work across our application, cloud, and infrastructure estate, which spans on-premises data centers and major clouds. You will apply patches, harden configuration, implement controls, and work the pull requests generated by AI tooling, following the processes and standards set by the senior engineer and technical lead.

About the Role

In this opportunity as Security Engineer, you will:

• Execute security work across the full stack: apply patches, upgrade application and open-source dependencies, harden cloud and operating-system configuration, and implement guardrails, WAF, and network-isolation changes.
• Work the pull requests generated by AI-augmented SAST and SCA tooling, confirm fixes hold, and coordinate regression testing with application teams.
• Support patching cycles and golden-image refreshes, and help remove unused and outdated software from server estates.
• Implement the controls and follow the runbooks, standards, and risk-based prioritization (in line with CISA guidance) set by the senior engineer and technical lead.
• Track status accurately from assignment through verified fix, and flag blockers early.
• Partner with application and platform teams to schedule and validate changes safely, and coordinate with the wider team across regions.
• Grow your skills across application, infrastructure, and cloud security with support from senior engineers.

About You

You're a fit for the role of Security Engineer if your background includes:

• 3 + years of experience in security engineering, software development, systems administration, or DevSecOps, with a desire to specialize in security, plus a bachelor's degree in Computer Science, Information Security, or a related field (or equivalent practical experience).
• Hands-on exposure to some of the following: patching, hardening, cloud configuration, network or identity controls, or scripting and automation.
• Exposure to one or more of AWS, Azure, GCP, and OCI, and to on-premises infrastructure.
• A basic understanding of security principles and common vulnerabilities, and of risk-based prioritization (CVSS and similar), with willingness to learn CISA KEV/EPSS in practice.
• Comfort working to defined processes, runbooks, and controls, and asking for review on complex work.
• A collaborative approach and strong ownership of the work you ship.
• Clear communication and attention to detail.

What's in it For You?

• Hybrid Work Model
• Flexibility & Work-Life Balance
• Career Development and Growth
• Industry Competitive Benefits
• Culture
• Social Impact
• Making a Real-World Impact

In the United States, Thomson Reuters offers a comprehensive benefits package to our employees. Our benefit package includes market competitive health, dental, vision, disability, and life insurance programs, as well as a competitive 401k plan with company match. In addition, Thomson Reuters offers market leading work life benefits with competitive vacation, sick and safe paid time off, paid holidays (including two company mental health days off), parental leave, sabbatical leave. These benefits meet or exceed the requirements of paid time off in accordance with any applicable state or municipal laws. Finally, Thomson Reuters offers the following additional benefits: optional hospital, accident and sickness insurance paid 100% by the employee; optional life and AD&D insurance paid 100% by the employee; Flexible Spending and Health Savings Accounts; fitness reimbursement; access to Employee Assistance Program; Group Legal Identity Theft Protection benefit paid 100% by employee; access to 529 Plan; commuter benefits; Adoption & Surrogacy Assistance; Tuition Reimbursement; and access to Employee Stock Purchase Plan. Thomson Reuters complies with local laws that require upfront disclosure of the expected pay range for a position. The base compensation range varies across locations.

About Us

Thomson Reuters informs the way forward by bringing together the trusted content and technology that people and organizations need to make the right decisions. We serve professionals across legal, tax, accounting, compliance, government, and media. Our products combine highly specialized software and insights to empower professionals with the data, intelligence, and solutions needed to make informed decisions, and to help institutions in their pursuit of justice, truth, and transparency. Reuters, part of Thomson Reuters, is a world leading provider of trusted journalism and news.

We are powered by the talents of 26,000 employees across more than 70 countries, where everyone has a chance to contribute and grow professionally in flexible work environments. At a time when objectivity, accuracy, fairness, and transparency are under attack, we consider it our duty to pursue them. Sound exciting? Join us and help shape the industries that move society forward.

As a global business, we rely on the unique backgrounds, perspectives, and experiences of all employees to deliver on our business goals. To ensure we can do that, we seek talented, qualified employees in all our operations around the world regardless of race, color, sex/gender, including pregnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under applicable law. Thomson Reuters is proud to be an Equal Employment Opportunity Employer providing a drug-free workplace.

Thomson Reuters makes reasonable accommodations for applicants with disabilities, including veterans with disabilities, and for sincerely held religious beliefs in accordance with applicable law. If you reside in the United States and require an accommodation in the recruiting process, you may contact our Human Resources Department at View email address on click.appcast.io. Disability accommodations in the recruiting process may include things like a sign language interpreter, making interview rooms accessible, providing assistive technology, or other relevant accommodations. Please note this email is not intended for general recruitment questions and we will promptly respond to inquiries regarding accommodations. More information on requesting an accommodation here.

Learn more on how to protect yourself from fraudulent job postings here.

More information about Thomson Reuters can be found on thomsonreuters.com