Senior Application Security Engineer

What you'll do

• Serve as a subject matter expert for web applications, mobile applications, databases, APIs, and containers.
• Support and maintain application security testing platforms and develop integrations with automation platforms.
• Review false-positive scan results and evaluate proposed mitigating factors with application development teams.
• Produce and track application security metrics to monitor program performance.
• Support the secure development and testing of critical Advisor and Investor applications.
• Mentor and educate product development and quality engineers on secure development best practices.
• Monitor CVEs and industry developments to provide inputs for continuous security improvements.

What we're looking for

• 5+ years of application security experience.
• 5+ years of experience performing manual testing of APIs and web applications to identify/validate vulnerabilities.
• 5+ years of experience developing and maintaining enterprise security libraries, components, and best practices checklists.
• 5+ years of experience performing application security risk evaluation and enhancing application security CI/CD pipelines.
• 5+ years of experience creating and maintaining scan profiles for static, authenticated dynamic, IAST, and 3rd party library automated analysis.
• 5+ years of experience reviewing and analyzing vulnerability scan results and tracking closure of vulnerabilities.
• Understanding of OWASP Top 10, secure coding best practices, secure SDLC, secure architecture, and DevSecOps methodologies.
• Bachelor’s Degree.