Senior Application Security Engineer
Core
Ensuring code scanning vulnerabilities follow organizational policies and working closely with developers to fix issues before production release.
Role type
Senior Application Security Engineer (IC)
Builds
Secure software delivery pipelines and remediated code
Domain
Financial Services / Application Security
Required skills
Application Security analysis, Application Penetration Testing, C#, C++, Java, Python, .Net, Static Application Security Testing (SAST), Dynamic App Security Testing (DAST), Container Security, Secure Software Development Lifecycle, OWASP Top 10, CWE, CI/CD pipeline development, Vulnerability management, Automation scripting, Threat modeling
Preferred skills
Bug Bounty, Manual penetration testing
Technologies
Jira, Confluence, SAST tools, DAST tools, Container technologies
Responsibilities
Work closely with developers to ensure all code is scanned and reported focusing on SAST, SCA, DAST, IAST, and Container Security issues; Interface with development and security architecture teams on vulnerability remediation, best practices, and threat modeling; Interface with the vulnerability management team to ensure vulnerabilities are reported and validated according to SLAs; Publish and present high-level management reports on the State of AppSec Program; Perform some manual testing activities to validate vulnerability or penetration testing findings; Create automation scripts to support internal cybersecurity projects.
Seniority
Senior, hands-on IC
