Senior Application Security Engineer (Blue Team)
Core
Senior Application Security Engineer ensuring product security from design and code through CI/CD pipelines for an AI wealth management platform.
Role type
Senior IC application security engineer (blue team)
Builds
Secure Java/Spring services and CI/CD pipelines for financial advisors
Domain
Fintech / Wealth Management
Deliverable
production ML models | product features
Required skills
Security assessments, threat modeling, secure code review (Java/Spring), SAST/DAST/SCA tooling, secrets scanning, service-to-service authentication/authorization, secure SDLC standards
Preferred skills
Regulated environment experience (fintech), AppSec automation, AWS cloud security, API security
Technologies
Java, Spring, Terraform, Kubernetes, AWS
Responsibilities
Educate development teams on secure coding practices; Perform technical security assessments and code reviews; Engage in threat modeling; Own and tune security tooling in CI/CD pipelines; Partner with engineering to close auth/authorization gaps; Work with detection teams to turn findings into durable detections
Seniority
Senior, hands-on IC