Engineer, Application Security
Core
Ensures ICE produces and maintains secure applications by influencing secure design, performing code analysis, and conducting hands-on penetration testing.
Role type
Application Security Engineer (AppSec)
Builds
Secure application lifecycle from design review through automated and hands-on testing
Domain
Financial technology / Application Security
Required skills
Java, C++, .NET, SAST, DAST, Software Composition Analysis, CI/CD integration, Cloud environments, Penetration testing, Secure design
Preferred skills
AI and large language models (LLMs) security, Prompt injection mitigation
Technologies
SAST, DAST, Software Composition scanners, Web Application Firewall (WAF), CI/CD pipelines
Responsibilities
Operate the Application Development Security Lifecycle from design review through testing; Maintain and contribute to Application Development Security Policies and standards; Work with development teams to establish security requirements early in the SDLC; Implement, maintain, and integrate security tools (SAST, DAST, WAF, bug bounty programs); Educate software engineers on secure coding practices
Seniority
Engineer level, determined by experience and demonstration of exceptional competencies including mentoring peers and improving processes
