Application Security Engineer
Core
Conduct application security reviews, AI-assisted code analysis, and drive remediation of vulnerabilities across critical market infrastructure applications.
Role type
Senior Application Security Engineer (DevSecOps)
Builds
Secure software delivery pipelines and resilient market infrastructure
Domain
Financial services / Cybersecurity
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Application security, secure software engineering, vulnerability remediation, secure coding practices, OWASP Top 10, SDLC security controls, DevSecOps, CI/CD security integration, SAST/DAST/SCA tooling, stakeholder engagement, risk translation
Preferred skills
Security certifications (CSSLP, CISSP, etc.), financial services experience, AI-assisted security analysis, threat modelling, Java/enterprise environments, Security Champion practices
Technologies
SAST, DAST, SCA, secret scanning, container security, cloud security assessment tools, CI/CD pipelines
Responsibilities
Prioritize and drive remediation of critical/high-severity code vulnerabilities; support threat modelling and secure design reviews; adapt AppSec guidance for varying team maturities; provide secure coding guidance and remediation patterns; review or contribute to pull requests; define security checkpoints in SDLC/CI/CD; optimize AppSec tooling; establish Security Champion practices; produce handover documentation and enablement materials
Seniority
Senior, hands-on IC
