Senior Information Security Engineer - Secure Development Lifecycle Management
Core
Lead incident response, conduct digital forensics, and design/maintain security solutions for networking, cloud, and application security within a financial institution.
Role type
Senior Information Security Engineer (Secure Development Lifecycle)
Builds
Security solutions, automated security requirements tools, and secure coding guidelines for banking applications.
Domain
Financial Services / Application Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Incident response, digital forensics, risk assessment, secure SDLC methodologies, application threat modeling, static analysis, CI/CD pipeline integration, cloud platform management, Python/JavaScript scripting, metrics reporting
Preferred skills
Secure Development Lifecycle Management, WASAPI, OWASP ESAPI, security coding standards, application security champions enablement
Technologies
Azure Cloud, Google Cloud, SD Elements, WASAPI, OWASP ASVS, NIST SSDF
Responsibilities
Lead or participate in computer security incident response activities; Conduct technical investigation of security related incidents and post incident digital forensics; Design, document, test, maintain, and provide issue resolution recommendations for moderately complex security solutions; Contribute to Secure Development Lifecycle Management practice by designing and managing non-functional security requirements; Integrate with state side leads to understand requirements and implement them in the practices and tools; Associate with Application Security Champions, Architects and Application development teams in Governance, oversight, and enablement of Enterprise Application Security
Seniority
Senior, hands-on IC