Application Security Engineer (Secure Development/Secrets Management)
Core
Partner with developers and stakeholders to advance enterprise secrets remediation and secure software development initiatives, eliminating hard-coded secrets and strengthening application security controls.
Role type
Senior IC Application Security Engineer (Secure Development & Secrets Management)
Builds
Secure backend services, APIs, reusable components, libraries, automation utilities, and security-focused tools integrated with enterprise platforms.
Domain
Financial services / Application Security / DevSecOps
Required skills
Secure SDLC principles, secrets management, credential lifecycle management, SAST/DAST/SCA analysis, CI/CD pipeline integration, backend architecture, object-oriented programming, API security, vulnerability remediation, automation development
Preferred skills
Enterprise Application Security program experience, regulated industry background, cloud-native security controls, relevant security certifications, AI-assisted secure coding, process improvement initiatives
Technologies
Java, Python, C#, Azure Key Vault, HashiCorp Vault, GitHub Actions, GitGuardian, Snyk, CI/CD pipelines
Responsibilities
Assess applications for hard-coded secrets and configuration risks; design and maintain secure backend services and APIs; develop scalable automation and remediation capabilities; analyze and prioritize findings from security assessments; participate in architecture reviews and recommend secure patterns; communicate security risks and remediation plans to stakeholders
Seniority
Senior, hands-on IC
