Job Description

Information Security Engineer – Denver, Colorado

Would you like to be a part of a global team of information security experts? How about unleashing your skills in a hugely successful business that is committed to moving money for better?  Join Western Union as an Information Security Engineer.

Motivated by our values: purpose driven, globally minded, and trustworthy & respectful

We’re a FinTech that’s using insight from customers and colleagues worldwide to improve financial services for families, small businesses, multinational corporations, and non-profit organizations. We’re a team of over 10,000 people spanning 200 countries and territories. We believe when money moves, better things happen.

Better requires process, discipline, and simplification

In this role, you will be managing SAST DAST and SCA tools which include regular maintenance of infrastructure, install updates of the tools, Test policy maintenance, connect with vendors for any tool enhancements or troubleshooting support, etc.  You will work closely with development teams and help them understand application vulnerabilities and the remediation.  You will perform Application Security Testing / Application penetration testing of Web App, APIs, Mobile and Thick client application using commercial and open-source tools.  You will be performing code reviews from a security point of view and assist the development team on possible remediations.  You’ll evaluate security controls and update severity of vulnerabilities based on controls.  You will implement security testing tools in CI/CD pipleline.  You’ll perform design and architecture review of various applications. 

For such a pivotal role, you will need a bachelor’s degree in a related field.  You will have 5+ years of experience with Static and Dynamic scan tooling process (Checkmarx, Semgrep, HCL Appscan, Netsparker, etc).  You will have experience performing application pen testing on Web/API and mobile applications.  You will need experience performing code reviews and both manual and automated penetration test.  You must have strong knowledge of Java, C# and JavaScript.  You will have experience with AWS, GCP or other cloud platforms.   You will have strong knowledge of Docker and Kubernetes along with container security.  You will have experience in performing thread modelling.  Familiarity with security standards and groups (OWASP, PCI-DSS, FISMA, NYDFS, HIPPA, etc) is a plus.

Join us, and let’s connect the world

Western Union is transforming its business and shaping the financial services sector by driving quality, convenience, and customer service to new levels of excellence. It’s an exciting time for our organization, as the largest cross-border money transfer operator, trusted by millions of consumers around the world. If you’re ready to unleash your potential to help drive change through bottom-up innovation, apply now.

We’re a company on the move, and we want our people to grow and develop. You’ll have plenty of opportunities to learn new skills and build a career, as well as a great salary and benefits package.

Inclusion and diversity are fundamental to our culture and success. Western Union is proud to be an Equal Opportunity-Affirmative Action Employer. The company will provide accommodation to applicants, including those with disabilities, during the recruitment process, in accordance with applicable laws. We are committed to equal employment opportunity regardless of race, color, religion, sex (including pregnancy or related medical conditions), national origin, veteran status, sexual orientation, gender identity, age, disability, marital status, or any other protected category.