Application Security Engineer - Officer
Core
Design, implement, and support DevSecOps and Application Security strategies to integrate cybersecurity into agile practices and CI/CD pipelines for a large number of applications.
Role type
Senior IC Application Security Engineer (DevSecOps)
Builds
Automated security processes, CI/CD integrations, and security tooling for enterprise applications
Domain
Financial Services / Application Security / DevSecOps
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
Application security (SAST, DAST, SCA, Container security), CI/CD pipeline automation, Cloud security (AWS, Azure), Software development (Java, .Net, Python, Node.js), Infrastructure as Code (Terraform, Ansible, Kubernetes), Security scanning and remediation, Audit compliance documentation
Preferred skills
GenAI model security scanning, Agile/Scrum practices, Technical solutioning for emerging technologies
Technologies
Java, .Net, Python, Node.js, Azure, AWS, Ansible, Terraform, Kubernetes, SAST, DAST, SCA
Responsibilities
Build DevSecOps & AppSec strategy, Partner with engineering to operationalize security principles, Assist teams with security tool onboarding and troubleshooting, Triage GenAI model security vulnerabilities, Deliver security metrics via dashboards, Maintain security documentation, Support audit processes, Continuously improve security processes and tools
Seniority
Senior, hands-on IC