About this role

Serve as a security advisor to various teams across Marsh.
Review projects for security weaknesses, risks, and vulnerabilities.
Stay at the forefront of new security controls, technology trends, and emerging threats.
Create or update application security best practices and develop code samples, prototypes, and tools to enhance the depth of security reviews.
Collaborate with various Marsh technology organizations.
Quickly “dive” into new projects to provide security expertise and support.

Passion for Information Security and problem solving.
Experience with microservices, Kubernetes, and cloud technologies.
Proficiency in building and using APIs, scripts, and applications, preferably in Python.
Strong understanding of authentication methods, protocols, and Application Security fundamentals.
Experience with Security by Design frameworks, Threat Modeling, and Secure SDLC.
Good understanding of cryptography, encryption and digital signature.
Experience in securing LLM-based applications and AI agents, including RAGs.
Knowledge of Federation, SAML, and OAuth protocols.
Ability to quickly absorb new technologies and write position papers.

Application Security Engineer – Developer

Key skills