Staff, Application Security Engineer
Core
Lead application security strategy, threat modeling, and secure SDLC for digital financial services, mobile platforms, and crypto systems.
Role type
Staff Application Security Engineer (Lead)
Builds
Secure software development lifecycle (SSDLC) practices, threat models, and secure code training programs
Domain
Fintech, digital banking, e-commerce
Required skills
Application security strategy, OWASP standards, SAST/DAST/SCA/IAST tooling, CI/CD pipeline security, threat modeling (STRIDE), mobile app security (reverse engineering, certificate pinning), cloud-native architectures (AWS/GCP, Kubernetes, Docker), secure coding standards, vulnerability management, external penetration test management
Preferred skills
CREST certifications, OSCP, OSWE, CSSLP, Java, Python, Go, Node.js, GitHub/GitLab/Bitbucket security tooling
Technologies
AWS, GCP, Kubernetes, Docker, Chekcmarx, Semgrep, Snyk, Burp Suite Professional, SonarQube
Responsibilities
Define and implement enterprise Application Security strategy; Standardize application security testing and vulnerability management; Oversee SAST/DAST/SCA/IAST tools in CI/CD pipelines; Lead architecture review and conduct threat modeling exercises; Manage external penetration tests per CREST standards; Design and deliver secure code training programs
Seniority
Staff, hands-on IC with leadership responsibilities
