Senior Application Security Researcher

Carrier Global Corporation, global leader in intelligent climate and energy solutions, is committed to creating innovations that bring comfort, safety and sustainability to life. Through cutting-edge advancements in climate solutions such as temperature control, air quality and transportation, we improve lives, empower critical industries and ensure safe transport of food, lifesaving medicines and more. Since inventing modern air conditioning in 1902, we lead with purpose: enhancing the lives we live and the world we share. We continue to lead because of our world-class, inclusive workforce that puts the customer at the center of everything we do. For more information, visit corporate.carrier.com or follow on Carrier social media at @Carrier.

About This Role

The Senior Security Engineer/ Architect will ensure the proper functioning of all network-based security controls across Carrier. Participate on a team of network / system operators with the appropriate expertise to deploy, maintain, and operate Carrier’s security tool stack. Develop operational rigor as evidenced by e.g. policies, runbooks, change control, and 24 x 7 x 365 ability to ensure tool stack availability and service delivery.

Cultivate and maintain deep working relationships with partners throughout Carrier, built on strong personal and team capability, as well as a track record of execution. Enhance a powerful team culture that nurtures quality performers.

Key Responsibilities

Work with internal partners from Security, IT, and Data Protection teams to select, implement, and support network security platforms and tools.
You will create an internal service catalogue of these controls, understanding key attributes for each, such as user experience, SLA, downstream impacts, etc. Work with internal and external audit teams to document, review, and satisfy required controls for audits, automating the controls as much as possible.
Work with the security architecture team and control operators with a core network-centric body of knowledge, and solution-specific knowledge as needed to support network security initiatives to protect the Carrier business units.
You will help develop a multi-functional knowledge management program to train new hires effectively on Carrier environments and tools, ensuring broad diffusion of knowledge among the team.
Develop strong, auditable processes and artifacts to ensure seamless continuity of network security operations.
Deliver 24 x 7 x 365 global operational capability, ensuring tool stack availability, coverage, and proper functioning.
You will work closely with colleagues in Identity and Access Management, Cyber, and Architecture / Engineering teams to deploy, configure, patch, operate, and decommission security hardware and software.
This role will specifically focus on network-based controls, such as firewalls, IDS / IPS, DNS security, outbound web proxy, email security, packet capture, flow analysis, RADIUS, 802.1x, NAC, etc.
Planning, engineering, and monitoring the security arrangements for the protection of the network systems.
Display a real passion for information security and the intricacies of hardening and securing systems and networks.

Required Qualifications:

High School Diploma / GED
5+ years technical experience in network operations, such as the deployment, configuration, maintenance, and operation of switches, routers, gateways, DNS servers, VPN concentrators, etc.
5+ years technical with firewalls, IDS, IPS, web proxies, email security systems, packet capture, flow analyzers, firewall rule analyzers, etc.
5+ years experience with Palo Alto, Fortinet, and/or Next Generation Firewalls.
2+ years experience with Zscaler Security Products (Zscaler Internet Access and Zscaler Private Access).
Available to participate in a 24 x 7 x 365 global network security operations capability, including maintaining on-call coverage of emergency issues.

Preferred Qualifications:

Bachelor’s Degree
Strong written and oral communications skills.
Available to participate in the hiring and training of staff, development of policies and procedures, maturation of processes and change control, development of key artifacts, and the ability to work with auditors with limited supervision.
Demonstrated experience determining newest technologies and processes that create noticeable improvements to the overall security ecosystem.
Experience using industry-standard analysis criteria to test the security level of a system or network.
Meraki MX security appliances
Experience with design and engineering of security controls.
Experience with data center hardware installation and maintenance.
Current CISSP or other industry-standard information security certification (Desired)

Additional information:

Immigration sponsorship is not supported for this position.
This position is remote, but candidates located within the Eastern Time Zone are preferred to support collaboration with geographically dispersed teams and business partners.

Pay Range

The annual salary for this position is between $96,000.00 - $192,000.00 annually. Factors which may affect pay within this range include, but are not limited to, skills, education, experience, and other unique qualifications of the successful candidate. The pay range will not be below the minimum wage applicable to the jurisdiction in which the applicant is to be employed.

Other Compensation

This position is entitled to short-term cash incentives, subject to plan requirements.

Benefits

Employees are eligible for benefits, including:

Health Care Benefits: Medical, Dental, Vision; Wellness incentives
Retirement Benefits
Time off and Leave: Paid vacation days, up to 15 days; paid sick days, up to 5 days; paid personal leave, up to 5 days; paid holidays, up to 13 days; birth and adoption leave; parental leave; family and medical leave; bereavement leave; jury duty leave; military leave; purchased vacation
Disability: Short-term and long-term disability
Life Insurance and Accidental Death and Dismemberment
Tax-Advantaged Accounts: Health Savings Account; Health Care Spending Account; Dependent Care Spending Account
Tuition Assistance

To learn more about our benefits offering, please click here Work with us | Carrier Corporate. The specific benefits available to any employee may vary depending on state and local laws and eligibility factors, such as date of hire and the applicability of collective bargaining agreements.

Carrier EEO Statement and Accommodations Process

Carrier is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status or any other applicable state or federal protected class. Carrier provides affirmative action in employment for qualified individuals with a Disability and Protected Veterans in compliance with section 503 of Rehabilitation Act and the Vietnam Era Veterans' Readjustment Assistance Act.

If you require a reasonable accommodation to complete the application process, participate in an interview, or otherwise engage in the hiring process, please contact us at . We will make every effort to meet your needs in accordance with applicable laws.

Application Deadline

Applications will be accepted for at least 3  days from Job Posting Date: 7 October 2026

Job Applicant's Privacy Notice

Please click on the link to review the Job Applicant Privacy Notice.

Use of AI

Technology-enabled tools may support parts of the recruitment process, with oversight by people.

Originally posted on Himalayas

Job Description

About Carrier

About This Role

Key Responsibilities

Work with internal partners from Security, IT, and Data Protection teams to select, implement, and support network security platforms and tools.
You will create an internal service catalogue of these controls, understanding key attributes for each, such as user experience, SLA, downstream impacts, etc. Work with internal and external audit teams to document, review, and satisfy required controls for audits, automating the controls as much as possible.
Work with the security architecture team and control operators with a core network-centric body of knowledge, and solution-specific knowledge as needed to support network security initiatives to protect the Carrier business units.
You will help develop a multi-functional knowledge management program to train new hires effectively on Carrier environments and tools, ensuring broad diffusion of knowledge among the team.
Develop strong, auditable processes and artifacts to ensure seamless continuity of network security operations.
Deliver 24 x 7 x 365 global operational capability, ensuring tool stack availability, coverage, and proper functioning.
You will work closely with colleagues in Identity and Access Management, Cyber, and Architecture / Engineering teams to deploy, configure, patch, operate, and decommission security hardware and software.
This role will specifically focus on network-based controls, such as firewalls, IDS / IPS, DNS security, outbound web proxy, email security, packet capture, flow analysis, RADIUS, 802.1x, NAC, etc.
Planning, engineering, and monitoring the security arrangements for the protection of the network systems.
Display a real passion for information security and the intricacies of hardening and securing systems and networks.

Required Qualifications:

High School Diploma / GED
5+ years technical experience in network operations, such as the deployment, configuration, maintenance, and operation of switches, routers, gateways, DNS servers, VPN concentrators, etc.
5+ years technical with firewalls, IDS, IPS, web proxies, email security systems, packet capture, flow analyzers, firewall rule analyzers, etc.
5+ years experience with Palo Alto, Fortinet, and/or Next Generation Firewalls.
2+ years experience with Zscaler Security Products (Zscaler Internet Access and Zscaler Private Access).
Available to participate in a 24 x 7 x 365 global network security operations capability, including maintaining on-call coverage of emergency issues.

Preferred Qualifications:

Bachelor’s Degree
Strong written and oral communications skills.
Available to participate in the hiring and training of staff, development of policies and procedures, maturation of processes and change control, development of key artifacts, and the ability to work with auditors with limited supervision.
Demonstrated experience determining newest technologies and processes that create noticeable improvements to the overall security ecosystem.
Experience using industry-standard analysis criteria to test the security level of a system or network.
Meraki MX security appliances
Experience with design and engineering of security controls.
Experience with data center hardware installation and maintenance.
Current CISSP or other industry-standard information security certification (Desired)

Additional information:

Immigration sponsorship is not supported for this position.
This position is remote, but candidates located within the Eastern Time Zone are preferred to support collaboration with geographically dispersed teams and business partners.

Pay Range

Other Compensation

This position is entitled to short-term cash incentives, subject to plan requirements.

Benefits

Employees are eligible for benefits, including:

Health Care Benefits: Medical, Dental, Vision; Wellness incentives
Retirement Benefits
Time off and Leave: Paid vacation days, up to 15 days; paid sick days, up to 5 days; paid personal leave, up to 5 days; paid holidays, up to 13 days; birth and adoption leave; parental leave; family and medical leave; bereavement leave; jury duty leave; military leave; purchased vacation
Disability: Short-term and long-term disability
Life Insurance and Accidental Death and Dismemberment
Tax-Advantaged Accounts: Health Savings Account; Health Care Spending Account; Dependent Care Spending Account
Tuition Assistance

Carrier EEO Statement and Accommodations Process

Application Deadline

Applications will be accepted for at least 3  days from Job Posting Date: 7 October 2026

Job Applicant's Privacy Notice

Please click on the link to review the Job Applicant Privacy Notice.

Use of AI

Technology-enabled tools may support parts of the recruitment process, with oversight by people.

Originally posted on Himalayas

Job Description

About Carrier

About This Role

Key Responsibilities

Work with internal partners from Security, IT, and Data Protection teams to select, implement, and support network security platforms and tools.
You will create an internal service catalogue of these controls, understanding key attributes for each, such as user experience, SLA, downstream impacts, etc. Work with internal and external audit teams to document, review, and satisfy required controls for audits, automating the controls as much as possible.
Work with the security architecture team and control operators with a core network-centric body of knowledge, and solution-specific knowledge as needed to support network security initiatives to protect the Carrier business units.
You will help develop a multi-functional knowledge management program to train new hires effectively on Carrier environments and tools, ensuring broad diffusion of knowledge among the team.
Develop strong, auditable processes and artifacts to ensure seamless continuity of network security operations.
Deliver 24 x 7 x 365 global operational capability, ensuring tool stack availability, coverage, and proper functioning.
You will work closely with colleagues in Identity and Access Management, Cyber, and Architecture / Engineering teams to deploy, configure, patch, operate, and decommission security hardware and software.
This role will specifically focus on network-based controls, such as firewalls, IDS / IPS, DNS security, outbound web proxy, email security, packet capture, flow analysis, RADIUS, 802.1x, NAC, etc.
Planning, engineering, and monitoring the security arrangements for the protection of the network systems.
Display a real passion for information security and the intricacies of hardening and securing systems and networks.

Required Qualifications:

High School Diploma / GED
5+ years technical experience in network operations, such as the deployment, configuration, maintenance, and operation of switches, routers, gateways, DNS servers, VPN concentrators, etc.
5+ years technical with firewalls, IDS, IPS, web proxies, email security systems, packet capture, flow analyzers, firewall rule analyzers, etc.
5+ years experience with Palo Alto, Fortinet, and/or Next Generation Firewalls.
2+ years experience with Zscaler Security Products (Zscaler Internet Access and Zscaler Private Access).
Available to participate in a 24 x 7 x 365 global network security operations capability, including maintaining on-call coverage of emergency issues.

Preferred Qualifications:

Bachelor’s Degree
Strong written and oral communications skills.
Available to participate in the hiring and training of staff, development of policies and procedures, maturation of processes and change control, development of key artifacts, and the ability to work with auditors with limited supervision.
Demonstrated experience determining newest technologies and processes that create noticeable improvements to the overall security ecosystem.
Experience using industry-standard analysis criteria to test the security level of a system or network.
Meraki MX security appliances
Experience with design and engineering of security controls.
Experience with data center hardware installation and maintenance.
Current CISSP or other industry-standard information security certification (Desired)

Additional information:

Immigration sponsorship is not supported for this position.
This position is remote, but candidates located within the Eastern Time Zone are preferred to support collaboration with geographically dispersed teams and business partners.

Pay Range

Other Compensation

This position is entitled to short-term cash incentives, subject to plan requirements.

Benefits

Employees are eligible for benefits, including:

Health Care Benefits: Medical, Dental, Vision; Wellness incentives
Retirement Benefits
Time off and Leave: Paid vacation days, up to 15 days; paid sick days, up to 5 days; paid personal leave, up to 5 days; paid holidays, up to 13 days; birth and adoption leave; parental leave; family and medical leave; bereavement leave; jury duty leave; military leave; purchased vacation
Disability: Short-term and long-term disability
Life Insurance and Accidental Death and Dismemberment
Tax-Advantaged Accounts: Health Savings Account; Health Care Spending Account; Dependent Care Spending Account
Tuition Assistance

Carrier EEO Statement and Accommodations Process

Application Deadline

Applications will be accepted for at least 3  days from Job Posting Date: 7 October 2026

Job Applicant's Privacy Notice

Please click on the link to review the Job Applicant Privacy Notice.

Use of AI

Technology-enabled tools may support parts of the recruitment process, with oversight by people.

Originally posted on Himalayas

Job Description

About Carrier

About This Role

Key Responsibilities

Work with internal partners from Security, IT, and Data Protection teams to select, implement, and support network security platforms and tools.
You will create an internal service catalogue of these controls, understanding key attributes for each, such as user experience, SLA, downstream impacts, etc. Work with internal and external audit teams to document, review, and satisfy required controls for audits, automating the controls as much as possible.
Work with the security architecture team and control operators with a core network-centric body of knowledge, and solution-specific knowledge as needed to support network security initiatives to protect the Carrier business units.
You will help develop a multi-functional knowledge management program to train new hires effectively on Carrier environments and tools, ensuring broad diffusion of knowledge among the team.
Develop strong, auditable processes and artifacts to ensure seamless continuity of network security operations.
Deliver 24 x 7 x 365 global operational capability, ensuring tool stack availability, coverage, and proper functioning.
You will work closely with colleagues in Identity and Access Management, Cyber, and Architecture / Engineering teams to deploy, configure, patch, operate, and decommission security hardware and software.
This role will specifically focus on network-based controls, such as firewalls, IDS / IPS, DNS security, outbound web proxy, email security, packet capture, flow analysis, RADIUS, 802.1x, NAC, etc.
Planning, engineering, and monitoring the security arrangements for the protection of the network systems.
Display a real passion for information security and the intricacies of hardening and securing systems and networks.

Required Qualifications:

High School Diploma / GED
5+ years technical experience in network operations, such as the deployment, configuration, maintenance, and operation of switches, routers, gateways, DNS servers, VPN concentrators, etc.
5+ years technical with firewalls, IDS, IPS, web proxies, email security systems, packet capture, flow analyzers, firewall rule analyzers, etc.
5+ years experience with Palo Alto, Fortinet, and/or Next Generation Firewalls.
2+ years experience with Zscaler Security Products (Zscaler Internet Access and Zscaler Private Access).
Available to participate in a 24 x 7 x 365 global network security operations capability, including maintaining on-call coverage of emergency issues.

Preferred Qualifications:

Bachelor’s Degree
Strong written and oral communications skills.
Available to participate in the hiring and training of staff, development of policies and procedures, maturation of processes and change control, development of key artifacts, and the ability to work with auditors with limited supervision.
Demonstrated experience determining newest technologies and processes that create noticeable improvements to the overall security ecosystem.
Experience using industry-standard analysis criteria to test the security level of a system or network.
Meraki MX security appliances
Experience with design and engineering of security controls.
Experience with data center hardware installation and maintenance.
Current CISSP or other industry-standard information security certification (Desired)

Additional information:

Immigration sponsorship is not supported for this position.
This position is remote, but candidates located within the Eastern Time Zone are preferred to support collaboration with geographically dispersed teams and business partners.

Pay Range

Other Compensation

This position is entitled to short-term cash incentives, subject to plan requirements.

Benefits

Employees are eligible for benefits, including:

Health Care Benefits: Medical, Dental, Vision; Wellness incentives
Retirement Benefits
Time off and Leave: Paid vacation days, up to 15 days; paid sick days, up to 5 days; paid personal leave, up to 5 days; paid holidays, up to 13 days; birth and adoption leave; parental leave; family and medical leave; bereavement leave; jury duty leave; military leave; purchased vacation
Disability: Short-term and long-term disability
Life Insurance and Accidental Death and Dismemberment
Tax-Advantaged Accounts: Health Savings Account; Health Care Spending Account; Dependent Care Spending Account
Tuition Assistance

Carrier EEO Statement and Accommodations Process

Application Deadline

Applications will be accepted for at least 3  days from Job Posting Date: 7 October 2026

Job Applicant's Privacy Notice

Please click on the link to review the Job Applicant Privacy Notice.

Use of AI

Technology-enabled tools may support parts of the recruitment process, with oversight by people.

Originally posted on Himalayas

Senior Application Security Researcher

ServiceNow GRC / IRM – Lead Solution Advisor

Information Security Officer (ISO) - Washington DC (Any city, DC, US, 99999)

Infrastructure Security Team Lead

Senior Cloud Security Consultant (m/w/d)

Sr. Staff Engineer - Developer Experience, Identity Management & Authorization (

Distinguished Forward Deployed Engineer, AI Security

Security Engineer (DevSecOps / AppSec)

Software Engineer, HSM Infrastructure Security, Consumer Devices

Information Security Technician

Engineer, Global Identity and Access Management

ANALISTA CYBER SECURITY PL

Cyber Security Architect

Security Engineer IV - US

Senior Application Security Researcher

Senior DevSecOps Engineer

DevSecOps Engineer

Senior Cybersecurity Specialist - AI/LLM/GenAI Focus

Aurora Endpoint Security Engineer 2 - German speaker (m/f/d)

Information Security Manager - Identity and Access Management (IAM)

Sr. Security Engineer/Architect

Penetration Tester - Contract

Privacy Manager

Cybersecurity Researcher - Fully Remote | Upto $250/hr

Senior Developer, Fullstack - Identity and Access Management (IAM)

Vigilant IT Security Manager - Portugal

Senior Engineer - Identity Solutions

Engineer - Identity Solutions

Staff Cybersecurity Software Engineer

AI Enablement & Governance - AI Security & Controls Lead

Job Description

About Carrier

About This Role

Key Responsibilities

Required Qualifications:

Preferred Qualifications:

Additional information:

Pay Range

Other Compensation

Benefits

Retirement Benefits

Tuition Assistance

Carrier EEO Statement and Accommodations Process

Application Deadline

Job Applicant's Privacy Notice

Use of AI

Job Description

About Carrier

About This Role

Key Responsibilities

Required Qualifications:

Preferred Qualifications:

Additional information:

Pay Range

Other Compensation

Benefits

Retirement Benefits

Tuition Assistance

Carrier EEO Statement and Accommodations Process

Application Deadline

Job Applicant's Privacy Notice

Use of AI

Senior Application Security Researcher

ServiceNow GRC / IRM – Lead Solution Advisor

Information Security Officer (ISO) - Washington DC (Any city, DC, US, 99999)

Infrastructure Security Team Lead

Senior Cloud Security Consultant (m/w/d)

Sr. Staff Engineer - Developer Experience, Identity Management & Authorization (

Distinguished Forward Deployed Engineer, AI Security

Security Engineer (DevSecOps / AppSec)

Software Engineer, HSM Infrastructure Security, Consumer Devices

Information Security Technician

Engineer, Global Identity and Access Management

ANALISTA CYBER SECURITY PL

Cyber Security Architect

Security Engineer IV - US

Senior Application Security Researcher

Senior DevSecOps Engineer

DevSecOps Engineer

Senior Cybersecurity Specialist - AI/LLM/GenAI Focus