Application Security Engineer, Vice President
Core
Comprehensive application security testing and vulnerability management across the software development lifecycle, focusing on automated and manual scans to identify and remediate security flaws in application code and open-source components.
Role type
Senior IC application security engineer (vulnerability management & secure coding)
Builds
Secure enterprise applications integrated into DevOps workflows
Domain
Financial services + application security
Required skills
DAST scanning (Invicti, Burp Suite), SAST scanning (Veracode), SCA scanning, secure coding (Java, Python), CI/CD integration, vulnerability remediation, compliance frameworks (NIST, PCI-DSS, SOX), scripting (Python, Bash, PowerShell), OWASP Top 10 knowledge
Preferred skills
AI/ML security (LLM, prompt injection, data leakage), cloud security (AWS, Azure, Oracle Cloud), OSCP/OSWE/GWAPT/CEH certifications
Technologies
Invicti, Veracode, Burp Suite, Java, Python, .NET, AWS, Azure, Oracle Cloud
Responsibilities
Conduct DAST, SAST, and SCA scans; analyze results and collaborate with developers for remediation; integrate security testing into CI/CD pipelines; write scripts for security automation; maintain compliance with security frameworks; review false positives and mitigated-by-design requests
Seniority
Senior, hands-on IC
