T

Thomson Reuters

Legal, financial data, and media services

Senior Security Reliability Engineer

Security Engineering & ArchitectureUpdated on Nov 11
Full-time

About the Job

Requirements

  • At least 5 years of security, software, or DevSecOps engineering experience, including experience securing and hardening applications, infrastructure, and cloud environments, plus a bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
  • Experience across at least two of AWS, Azure, GCP, and OCI, alongside on-premises infrastructure.
  • Understanding of security principles and common vulnerabilities, with hands-on experience in patching, hardening, cloud configuration, network isolation, and identity and access controls.
  • Hands-on experience with SAST and SCA tooling, remediating application and open-source dependency vulnerabilities, and infrastructure patching.
  • A track record of improving engineering processes and reducing cycle time in patching, releases, or security work.
  • Familiarity with vulnerability prioritization using CVSS, EPSS, and CISA KEV, SLA-driven burndown, and AI-assisted tooling, including critical review of its output.
  • Clear communication, some experience mentoring engineers, and ownership of security outcomes.

Responsibilities

  • Secure and harden the application and open-source dependency estate, infrastructure, cloud configurations and guardrails, WAF, network isolation, secrets, and machine-identity management.
  • Improve security processes by reworking patching cycles and golden-image refreshes, reducing cycle time, and removing friction.
  • Implement and tune security controls across operating systems, containers, CI/CD pipelines, cloud configuration, and network boundaries to defend against sophisticated adversaries and insider threats.
  • Scale AI-augmented SAST and SCA tooling coverage, review generated pull requests, validate fixes, prioritize work in line with CISA guidance, and measure mean time to remediate, throughput, and SLA burndown.
  • Package reusable patterns, tooling, and runbooks so routine work can be performed by more junior engineers, and mentor them through technical review of their fixes.
  • Partner with application and platform teams to land and validate changes safely, and coordinate with the wider team across regions and time zones.
  • Provide accurate security metrics and status for program reporting.

About the Company

Thomson Reuters

Legal, financial data, and media services

Thomson Reuters provides intelligent information and professional services for law, tax, finance, and media. It serves law firms, corporations, government agencies, and financial institutions with platforms like legal research (Westlaw), tax software (UltraTax CS), financial market data, and news services. These products are accessed through subscription-based platforms, ensuring ongoing updates and a steady revenue stream. The company also monetizes through advertising on media platforms and data analytics sales. It distinguishes itself by offering a broad, integrated suite of industry-specific tools combined with AI, cognitive computing, and machine learning to improve accuracy, efficiency, and predictive analytics in research and data insights. Its goal is to be a trusted partner that helps professionals make informed decisions by delivering reliable information and decision-ready tools while pursuing responsible, values-driven initiatives.

Company size
10,001+
Company stage
IPO
Headquarters
Toronto, Canada
Founded
1851

Recently Posted Jobs

Explore more opportunities at Thomson Reuters

See more jobs