Description

Our Marsh Information Security team is seeking candidates for the following position based in NYC, Toronto or Louisville, KY and be onsite 3 days a week. The Application Security Engineer will act as a security advisor to various teams across Marsh. You will also develop code samples and prototypes.

Application Security Engineer

We will count on you to:

• Serve as a security advisor to various teams across Marsh.
• Review projects for security weaknesses, risks, and vulnerabilities.
• Stay at the forefront of new security controls, technology trends, and emerging threats.
• Create or update application security best practices and develop code samples, prototypes, and tools to enhance the depth of security reviews.
• Collaborate with various Marsh technology organizations.
• Quickly "dive" into new projects to provide security expertise and support.

What you need to have:

• Passion for Information Security and problem solving.
• Experience with microservices, Kubernetes, and cloud technologies.
• Proficiency in building and using APIs, scripts, and applications, preferably in Python.
• Good understanding of cryptography, encryption and digital signature
• Strong understanding of authentication methods, protocols, and Application Security fundamentals.
• Experience with Security by Design frameworks, Threat Modeling, and Secure SDLC.
• Penetration testing and vulnerability assessment. Experience with Burp Suite.

What makes you stand out?

• Experience in securing LLM-based applications and AI agents, including RAGs.
• Knowledge of Federation, SAML, and OAuth protocols.
• Experience with Diagram as Code framework

Why join our team:

• We help you be your best through professional development opportunities, interesting work and supportive leaders.
• We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and have impact for colleagues, clients and communities.
• Our scale enables us to provide a range of career opportunities, as well as benefits and rewards to enhance your well-being.

Marsh (NYSE: MRSH) is a global leader in risk, reinsurance and capital, people and investments, and management consulting, advising clients in 130 countries. With annual revenue of over $27 billion and more than 95,000 colleagues, Marsh helps build the confidence to thrive through the power of perspective. For more information, visit corporate.marsh.com, or follow us on LinkedIn and X.

Marsh is committed to embracing a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and embrace diversity of age background, disability, ethnic origin, family duties, gender orientation or expression, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, veteran status (including protected veterans), or any other characteristic protected by applicable law. If you have a need that requires accommodation, please let us know by contacting reasonableaccommodations@mmc.com.

Marsh is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one "anchor day" per week on which their full team will be together in person.

The applicable base salary range for this role is $119,000 to $237,700.

The base pay offered will be determined on factors such as experience, skills, training, location, certifications, education, and any applicable minimum wage requirements. Decisions will be determined on a case-by-case basis. In addition to the base salary, this position may be eligible for performance-based incentives.

We are excited to offer a competitive total rewards package which includes health and welfare benefits, tuition assistance, 401K savings and other retirement programs as well as employee assistance programs.