Our Marsh Information Security team is seeking candidates for the following position based in NYC, Toronto or Louisville, KY and be onsite 3 days a week. The Application Security Engineer will act as a security advisor to various teams across Marsh. You will also develop code samples and prototypes.
Application Security Engineer
We will count on you to:
Marsh is committed to embracing a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and embrace diversity of age background, disability, ethnic origin, family duties, gender orientation or expression, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, veteran status (including protected veterans), or any other characteristic protected by applicable law. If you have a need that requires accommodation, please let us know by contacting [email protected].
Marsh is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one “anchor day” per week on which their full team will be together in person.
The applicable base salary range for this role is $119,000 to $237,700.
The base pay offered will be determined on factors such as experience, skills, training, location, certifications, education, and any applicable minimum wage requirements. Decisions will be determined on a case-by-case basis. In addition to the base salary, this position may be eligible for performance-based incentives.
We are excited to offer a competitive total rewards package which includes health and welfare benefits, tuition assistance, 401K savings and other retirement programs as well as employee assistance programs.
R_346580
Application Security Engineer
We will count on you to:
- Serve as a security advisor to various teams across Marsh.
- Review projects for security weaknesses, risks, and vulnerabilities.
- Stay at the forefront of new security controls, technology trends, and emerging threats.
- Create or update application security best practices and develop code samples, prototypes, and tools to enhance the depth of security reviews.
- Collaborate with various Marsh technology organizations.
- Quickly “dive” into new projects to provide security expertise and support.
- Passion for Information Security and problem solving.
- Experience with microservices, Kubernetes, and cloud technologies.
- Proficiency in building and using APIs, scripts, and applications, preferably in Python.
- Good understanding of cryptography, encryption and digital signature
- Strong understanding of authentication methods, protocols, and Application Security fundamentals.
- Experience with Security by Design frameworks, Threat Modeling, and Secure SDLC.
- Penetration testing and vulnerability assessment. Experience with Burp Suite.
- Experience in securing LLM-based applications and AI agents, including RAGs.
- Knowledge of Federation, SAML, and OAuth protocols.
- Experience with Diagram as Code framework
- We help you be your best through professional development opportunities, interesting work and supportive leaders.
- We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and have impact for colleagues, clients and communities.
- Our scale enables us to provide a range of career opportunities, as well as benefits and rewards to enhance your well-being.
Marsh is committed to embracing a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and embrace diversity of age background, disability, ethnic origin, family duties, gender orientation or expression, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, veteran status (including protected veterans), or any other characteristic protected by applicable law. If you have a need that requires accommodation, please let us know by contacting [email protected].
Marsh is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one “anchor day” per week on which their full team will be together in person.
The applicable base salary range for this role is $119,000 to $237,700.
The base pay offered will be determined on factors such as experience, skills, training, location, certifications, education, and any applicable minimum wage requirements. Decisions will be determined on a case-by-case basis. In addition to the base salary, this position may be eligible for performance-based incentives.
We are excited to offer a competitive total rewards package which includes health and welfare benefits, tuition assistance, 401K savings and other retirement programs as well as employee assistance programs.
R_346580
About the company
Company website•Insurance and Business Consulting and Services
We help our clients and colleagues grow — and our communities thrive — by protecting and promoting possibility. We seek better ways to manage risk and define more effective paths to the right outcome. We go beyond risk to rewards for our clients, our company, our colleagues, and the communities in which we serve.
Marsh Risk is a part of Marsh. Together with Mercer, Guy Carpenter, and Oliver Wyman, we help organizations build resilience and competitive advantages from every angle. With annual revenue over $24 billion and more than 90,000 colleagues in 130 countries, Marsh helps build the confidence to thrive through the power of perspective.