Application Security Engineer
Core
Architecting secure design principles, identifying complex vulnerabilities, conducting security assessments, and promoting secure coding practices for the organization's product suite.
Role type
Senior Application Security Engineer
Builds
Secure application architectures and automated security guardrails within CI/CD pipelines
Domain
Financial services / Capital markets / Application Security
Required skills
Application security engineering, Penetration testing, Security code reviews, OWASP Top 10, CWE Top 25, Secure coding practices, CI/CD environments, Web application security, Cloud security, Microservices architectures, Application layer protocols (HTTP, WebSockets, SQL, JSON, Protobufs), Cryptographic protocols (TLS), Cloud architecture (CNAPP, Docker/Kubernetes, AWS Lambda), Industry tools (Burp Suite, SQLmap, Wireshark, CSPM, SAST/DAST)
Preferred skills
Offensive Security Certified Professional (OSCP/OSWE), CISSP, CCSAS
Technologies
Burp Suite Professional, Chrome/FF dev tools, SQLmap, Wireshark, CSPM, SAST/DAST tools, C++, C#, Python, JavaScript, AWS Lambda, Docker, Kubernetes
Responsibilities
Lead and execute ongoing application security testing; Collaborate with development teams to design secure application architectures; Perform thorough code reviews to identify security flaws; Articulate complex technical vulnerabilities to stakeholders; Provide guidance on vulnerability management lifecycle; Maintain KPI reports on security posture; Identify advanced vulnerabilities using penetration testing and threat modeling; Create and maintain security documentation; Partner with DevOps to automate security tests in CI/CD pipelines.
Seniority
Senior, hands-on IC
