Senior Application Security Engineer
Core
Expert-level specialist leading the Software Security Assurance Program to identify, validate, and remediate vulnerabilities across the City's application portfolio.
Role type
Senior Application Security Engineer (Lead IC)
Builds
Secure-by-design software for NYC government agencies
Domain
Public sector / Application Security
Deliverable
production ML models | product features | dashboards & analysis
Required skills
SAST/DAST/SCA platform operation, manual exploit reproduction, vulnerability pattern analysis, secure coding guidance, technical reporting, team mentorship
Preferred skills
None stated
Technologies
SAST, DAST, SCA
Responsibilities
Operate and optimize enterprise security scanning platforms; perform advanced manual testing and exploit reproduction; partner with development teams to translate findings into remediation requirements; identify recurring vulnerability patterns; mentor internal team members; generate technical reports and executive summaries.
Seniority
Senior, hands-on IC with mentorship responsibilities