Specialist, Application Security
Core
Application Security Specialist responsible for securing modern applications, driving risk reduction, and enabling automation in CI/CD pipelines for a global financial services institution.
Role type
Specialist, Application Security (IC)
Builds
Secure-by-design development practices, automated security controls, and risk mitigation strategies for digital assets.
Domain
Financial Services / Application Security / DevSecOps
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
Modern application architecture, cloud-native security, DevOps practices, vulnerability management, SAST/SCA/DAST/ASPM tools, software composition analysis (SBOM), OWASP Top 10, NIST/SOX compliance frameworks, threat actor analysis, remediation strategy design.
Preferred skills
Scripting (Python, PowerShell, Bash), exploit validation, web application penetration testing, agentic AI for security use cases, industry standards (CIS, PCI DSS).
Technologies
SAST, SCA, DAST, ASPM, CI/CD automation tools, vulnerability scanning platforms, CVE/CVSS/EPSS/CWE data sources.
Responsibilities
Serve as escalation point for operational security work and provide technical support for security tools. Utilize AppSec expertise to resolve complex technical challenges bridging AppSec/DevOps and business teams. Collaborate with leadership to define the future direction of the AppSec program. Enhance vulnerability and configuration monitoring for open source, third-party, and proprietary code. Design and implement security policies and alerting mechanisms based on SOX and NIST standards. Conduct qualitative and quantitative analyses to promote secure-by-design principles. Validate mitigation controls and ensure reporting metrics convey risk posture to leadership. Revise processes and documentation to enhance AppSec capabilities, including proof-of-concept exploits. Collaborate with engineering teams to address vulnerabilities and define requirements for automation tools.
Seniority
Specialist, hands-on IC