Engineer, Application Security

Intercontinental Exchange Holdings, Inc. (ICE) is seeking an Application Security Engineer to help ensure secure application production and ongoing maintenance. The role combines security lifecycle ownership, technical testing, and developer enablement to strengthen software design, reduce vulnerabilities, and communicate results to engineering and leadership.

Application Security Responsibilities

• Operate the Application Development Security Lifecycle from design review through automated and hands-on testing.
• Maintain and contribute to Application Development Security Policies and standards by monitoring industry trends and publications from organizations such as NIST, OWASP, and SANS.
• Partner with development teams to establish security requirements early in the SDLC and provide security subject matter expertise during new projects and releases.
• Emphasize automation while implementing, maintaining, and integrating modern technologies to evaluate application security using SAST, DAST, software composition scanners, Web Application Firewall (WAF), and bug bounty programs.
• Keep software engineers current on secure coding practices through training sessions, one-on-one education, Intranet blogs, and other knowledge-sharing opportunities.

Required Qualifications

• University degree in Computer Science, Engineering, MIS, CIS, or a related discipline.
• Software engineering experience in Java, C++, .NET, and/or related languages.
• Expertise in deploying, configuring, and using SAST, DAST, and Software Composition capabilities in large environments.
• Experience designing solutions that integrate transparently with the CI/CD pipeline.
• Familiarity with application development in large cloud environments.
• Interest in or exposure to AI and large language models (LLMs), including emerging security risks such as prompt injection (plus).

Technical Focus Areas

• Languages and frameworks: Java, C++, .NET
• Security testing and protection: SAST, DAST, Software Composition, Web Application Firewall (WAF)
• Program-based security: bug bounty programs
• Delivery workflow: CI/CD pipeline
• Emerging areas: AI, large language models (LLMs), prompt injection

Level Expectations (Analyst, Engineer, Sr. Engineer)

• Document and publish technology guidance and repeatable processes.
• Mentor peers in both group and one-on-one settings.
• Improve processes and introduce stronger technology approaches.
• Take initiative to learn business goals, liaise with other departments, and identify opportunities to increase productivity across ICE groups and offices.

Location and Education

Location: Jacksonville, FL (onsite). Education: University degree in Computer Science, Engineering, MIS, CIS, or related discipline.